Analysis
- max time kernel
94s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
01/03/2024, 09:52
General
- Target Eternity.exe
- Size 887KB
- Sample240301-lwj76afd44
- SHA256 d965c928027ea8bada733335ac3a4113c2059b5c40d3eac1fe2c0a6c8b4ce622
Malware Config
Signatures
- Detects Eternity stealer 1 IoCs
- Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
- Executes dropped EXE 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Eternity.exe"C:\Users\Admin\AppData\Local\Temp\Eternity.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\dcd.exe"C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path=""2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
dcd.exe
memory/4516-0-0x0000000000C30000-0x0000000000D16000-memory.dmp
memory/4516-1-0x00007FFF986A0000-0x00007FFF99161000-memory.dmp
memory/4516-2-0x000000001B860000-0x000000001B8B0000-memory.dmp
memory/4516-3-0x00000000015C0000-0x00000000015C1000-memory.dmp
memory/4516-4-0x00000000015C0000-0x00000000015C1000-memory.dmp
memory/4516-5-0x0000000002DE0000-0x0000000002DF0000-memory.dmp
memory/4516-6-0x000000001B810000-0x000000001B84E000-memory.dmp
memory/4516-7-0x0000000002DE0000-0x0000000002DF0000-memory.dmp
memory/4516-8-0x0000000002DE0000-0x0000000002DF0000-memory.dmp
memory/4516-14-0x000000001BC30000-0x000000001BD32000-memory.dmp
memory/4516-15-0x00007FFF986A0000-0x00007FFF99161000-memory.dmp