Overview

overview

10

Static

static

10

SirWare.exe

windows7-x64

10

SirWare.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SirWare.exe

  • Size

    4.6MB

  • Sample

    240513-kqe6ksga46

  • MD5

    35091354095cf19568ed3174619d1c3e

  • SHA1

    07a1b4569906e04fd6a9832bd4cf999a673f5ce0

  • SHA256

    d4e0148bc263ae1265b5c5ba1a1d56661d7afda8c307c52e6f10e47f67921693

  • SHA512

    fa4365f22291d51ff0fc1c6cd3d29d4fe5d77ff89120c54abece5a6cc42b34e1af124a2a4eca51e97c3ad47d03de3ceb3ccc110818d3b1af911f6b8533921e4f

  • SSDEEP

    98304:brL3/7aNJIxFWP3/7a3/7dkYjLbOlZEfmEvjPVRF/z0A3/7:b3/7aNJCWP3/7a3/7FLb3fhF/zz3/7

Score
10/10
eternityspywarestealer

Malware Config

Targets

    • Target

      SirWare.exe

    • Size

      4.6MB

    • MD5

      35091354095cf19568ed3174619d1c3e

    • SHA1

      07a1b4569906e04fd6a9832bd4cf999a673f5ce0

    • SHA256

      d4e0148bc263ae1265b5c5ba1a1d56661d7afda8c307c52e6f10e47f67921693

    • SHA512

      fa4365f22291d51ff0fc1c6cd3d29d4fe5d77ff89120c54abece5a6cc42b34e1af124a2a4eca51e97c3ad47d03de3ceb3ccc110818d3b1af911f6b8533921e4f

    • SSDEEP

      98304:brL3/7aNJIxFWP3/7a3/7dkYjLbOlZEfmEvjPVRF/z0A3/7:b3/7aNJCWP3/7a3/7FLb3fhF/zz3/7

    Score
    10/10
    eternityspywarestealer

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks