General
-
Target
Pathfinder_2.19.3.exe
-
Size
7.2MB
-
Sample
240404-t1szvsdb44
-
MD5
0c702acbc7d30c865839dcb8a94a4a86
-
SHA1
06186c0bace78cf632d1bf31566d3e6479ab329c
-
SHA256
f3c880591e06396f588d5b45c599ba6aef1aae4065d0d55b3560e3547242b697
-
SHA512
5de2485877995cfe5b74385ed68df580c0ca8105a9089ecd9255c0e273a1677899157d73817f689af667b50da6510a8561c56309937dc32dca408fd5b2f2af7c
-
SSDEEP
98304:VXoFOv7y5Wm9647jfOzEa+yF0tznDOrq50oE7kwKSRPAb2Zpbq6+QYa:9E647jfOzCyCtL75YRPAkFvZX
Static task
static1
Behavioral task
behavioral1
Sample
Pathfinder_2.19.3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Pathfinder_2.19.3.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
eternity
http://izrukvro5khcol3z7cvvdq3akeunlod2gshgn7ppo3a4jvse3z5hpiyd.onion
Targets
-
-
Target
Pathfinder_2.19.3.exe
-
Size
7.2MB
-
MD5
0c702acbc7d30c865839dcb8a94a4a86
-
SHA1
06186c0bace78cf632d1bf31566d3e6479ab329c
-
SHA256
f3c880591e06396f588d5b45c599ba6aef1aae4065d0d55b3560e3547242b697
-
SHA512
5de2485877995cfe5b74385ed68df580c0ca8105a9089ecd9255c0e273a1677899157d73817f689af667b50da6510a8561c56309937dc32dca408fd5b2f2af7c
-
SSDEEP
98304:VXoFOv7y5Wm9647jfOzEa+yF0tznDOrq50oE7kwKSRPAb2Zpbq6+QYa:9E647jfOzCyCtL75YRPAkFvZX
Score10/10-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Uses the VBS compiler for execution
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-