Overview

overview

10

Static

static

10

HWID Changer.exe

windows7-x64

10

HWID Changer.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HWID Changer.exe

  • Size

    1.1MB

  • Sample

    240228-qvt37acg8t

  • MD5

    5a3ddf0c0b07ce709c802ee3ee000438

  • SHA1

    c5d128fab542ba17c92db8481215167f16b2a606

  • SHA256

    88b9188a51717b40cd1921bd8d760dddccc43ab7c3b6015b3091faf1eaf783eb

  • SHA512

    6e1b6e6fcee9aea6cd91cfded327ab284195a742a8fe39636d830de44c4d51b15b522ffb25e496a0fdca0ab1a13fb6f44cdb43fc71f935559250537fa28af996

  • SSDEEP

    24576:DwT7rC6qoKmtTUhxD+iecTryJWlnjVcT:KrC6qoKDN3r1jV

Score
10/10
eternitystealer

Malware Config

Targets

    • Target

      HWID Changer.exe

    • Size

      1.1MB

    • MD5

      5a3ddf0c0b07ce709c802ee3ee000438

    • SHA1

      c5d128fab542ba17c92db8481215167f16b2a606

    • SHA256

      88b9188a51717b40cd1921bd8d760dddccc43ab7c3b6015b3091faf1eaf783eb

    • SHA512

      6e1b6e6fcee9aea6cd91cfded327ab284195a742a8fe39636d830de44c4d51b15b522ffb25e496a0fdca0ab1a13fb6f44cdb43fc71f935559250537fa28af996

    • SSDEEP

      24576:DwT7rC6qoKmtTUhxD+iecTryJWlnjVcT:KrC6qoKDN3r1jV

    Score
    10/10
    eternitystealer

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Drops startup file

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks