General

  • Target

    Pathfinder_2.19.3.exe

  • Size

    7.2MB

  • Sample

    240404-t1szvsdb44

  • MD5

    0c702acbc7d30c865839dcb8a94a4a86

  • SHA1

    06186c0bace78cf632d1bf31566d3e6479ab329c

  • SHA256

    f3c880591e06396f588d5b45c599ba6aef1aae4065d0d55b3560e3547242b697

  • SHA512

    5de2485877995cfe5b74385ed68df580c0ca8105a9089ecd9255c0e273a1677899157d73817f689af667b50da6510a8561c56309937dc32dca408fd5b2f2af7c

  • SSDEEP

    98304:VXoFOv7y5Wm9647jfOzEa+yF0tznDOrq50oE7kwKSRPAb2Zpbq6+QYa:9E647jfOzCyCtL75YRPAkFvZX

Score
10/10

Malware Config

Extracted

Family

eternity

C2

http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion

Targets

    • Target

      Pathfinder_2.19.3.exe

    • Size

      7.2MB

    • MD5

      0c702acbc7d30c865839dcb8a94a4a86

    • SHA1

      06186c0bace78cf632d1bf31566d3e6479ab329c

    • SHA256

      f3c880591e06396f588d5b45c599ba6aef1aae4065d0d55b3560e3547242b697

    • SHA512

      5de2485877995cfe5b74385ed68df580c0ca8105a9089ecd9255c0e273a1677899157d73817f689af667b50da6510a8561c56309937dc32dca408fd5b2f2af7c

    • SSDEEP

      98304:VXoFOv7y5Wm9647jfOzEa+yF0tznDOrq50oE7kwKSRPAb2Zpbq6+QYa:9E647jfOzCyCtL75YRPAkFvZX

    Score
    10/10
    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Uses the VBS compiler for execution

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks