Overview

overview

10

Static

static

10

Growtopia ...CS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Growtopia Auto-CCS.exe

  • Size

    20.8MB

  • Sample

    240325-nsk2dshd7w

  • MD5

    f67d2e36d2fef9bac3eb2e22f697d766

  • SHA1

    e039b22c54bd76ac71e41e901479adb46fd9885c

  • SHA256

    d3f12c274e75824ded175557b6d4bc660d3c057db24ca33b7f8c655229afc921

  • SHA512

    feb884c8f49fcee93365d2a06827086c63da39089c17b62437ef51b1d3b6c7fa7c3ab5b65b2239b559f15cb7d8990e4c148a26f2a28cd889acb1d6b822a0658e

  • SSDEEP

    393216:yO6nODMKMw6nJVA9+0Of08iEQAsHq9/zTre7Up7Ts+Tn1:6uMwj9BOcHY9reoRR1

Score
10/10
eternitystealer

Malware Config

Targets

    • Target

      Growtopia Auto-CCS.exe

    • Size

      20.8MB

    • MD5

      f67d2e36d2fef9bac3eb2e22f697d766

    • SHA1

      e039b22c54bd76ac71e41e901479adb46fd9885c

    • SHA256

      d3f12c274e75824ded175557b6d4bc660d3c057db24ca33b7f8c655229afc921

    • SHA512

      feb884c8f49fcee93365d2a06827086c63da39089c17b62437ef51b1d3b6c7fa7c3ab5b65b2239b559f15cb7d8990e4c148a26f2a28cd889acb1d6b822a0658e

    • SSDEEP

      393216:yO6nODMKMw6nJVA9+0Of08iEQAsHq9/zTre7Up7Ts+Tn1:6uMwj9BOcHY9reoRR1

    Score
    10/10
    eternitystealer

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks