eternity | Casino[.]Hack[.]zip

General

Target
Casino.Hack.zip
Size 535KB
Sample240329-tfe79sca2s
SHA256 a19c47f0bc7594e84478f6abad39f5aa458371e67999ee36d0efd8a8a2feeb1b
MD5 9fdfc351da71a945857ec649ad2c5cd5
SHA1 905d59336dd921d32bf8191e56685ba8b0f94cce
SHA512 2315d6dfd085a9e800b111048dac9de4c46b7062a00beae4eea4fb35beb5ef5092ce783109c36c4e7f69e2d16b0165fa925ee384a448a9e16fcf179ec7a59a29
SSDEEP 12288:MDjD2dvKm9H1NHUrbgToMUbYeidcmIsHsmx5yjh+Jp:kWdKm9HHHU2oMUbYeid1IsHstjh+j
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealer eternity

Malware Config

Signatures

Detects Eternity stealer 1 IoCs

stealer

resource	yara_rule
static1/unpack001/Casino.Hack/Casino.Hack.exe	eternity_stealer

Eternity family
eternity

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Casino.Hack/Casino.Hack.exe

File Explorer

Casino.Hack.zip

.zip 535KB
Casino.Hack/Casino.Hack.exe

.exe 811KB

Casino.Hack.zip

SHA256 a19c47f0bc7594e84478f6abad39f5aa458371e67999ee36d0efd8a8a2feeb1b
MD5 9fdfc351da71a945857ec649ad2c5cd5
SHA1 905d59336dd921d32bf8191e56685ba8b0f94cce
SHA512 2315d6dfd085a9e800b111048dac9de4c46b7062a00beae4eea4fb35beb5ef5092ce783109c36c4e7f69e2d16b0165fa925ee384a448a9e16fcf179ec7a59a29
SSDEEP 12288:MDjD2dvKm9H1NHUrbgToMUbYeidcmIsHsmx5yjh+Jp:kWdKm9HHHU2oMUbYeid1IsHstjh+j
MD5 SHA1 SHA512 SSDEEP

Casino.Hack/Casino.Hack.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b9e62d1062b81c9e45f7c9c089c09a0293c382c6073d23add20e4cb76b17a582
MD5 b8ca231e45d6e98e05e23d1a2908ad77
SHA1 14c1d99966e2099eeb69eb48108af9a84a24c940
SHA512 c238bb6498b4b65c507f2d6f3660b72c71dbe37e1957250d7cc2463d0e0b8d18370448900c14fb1cddca2115d935ada7f50147249e0e4533ec2611c34f78688b
SSDEEP 12288:pTEYAsROAsrt/uxduo1jB0Y96qGp5ADrrmUJs0ZfZF/hzp4fEvtXXX6CclDn1hQ3:pwT7rC6qGp5AHKU7f7ncE1XanD12Im
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Detects Eternity stealer

stealer
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

258990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Casino.Hack.zip

Casino.Hack/Casino.Hack.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Casino.Hack.zip

Casino.Hack/Casino.Hack.exe

mscoree

dotnet