Analysis
- max time kernel
91s - max time network
93s - platform
windows11-21h2_x64 - resource
win11-20240426-en - resource tags
- submitted
04/06/2024, 14:16
General
- Target Eternity_download.exe
- Size 1.2MB
- Sample240604-rlcm8aaa3z
- SHA256 a5f51085387a791f59857b68302b8f17415da6909bb919579c0236590f40f8a2
Malware Config
Signatures
- Detects Eternity stealer 1 IoCs
- Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
- Executes dropped EXE 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Eternity_download.exe"C:\Users\Admin\AppData\Local\Temp\Eternity_download.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\dcd.exe"C:\Users\Admin\AppData\Local\Temp\dcd.exe" -path=""2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
dcd.exe
memory/1488-0-0x00007FFD7CDF3000-0x00007FFD7CDF5000-memory.dmp
memory/1488-1-0x0000000000A40000-0x0000000000B54000-memory.dmp
memory/1488-2-0x0000000002E90000-0x0000000002EE0000-memory.dmp
memory/1488-3-0x00007FFD7CDF0000-0x00007FFD7D8B2000-memory.dmp
memory/1488-4-0x00007FFD7CDF0000-0x00007FFD7D8B2000-memory.dmp
memory/1488-5-0x000000001B7E0000-0x000000001B81E000-memory.dmp
memory/1488-6-0x00007FFD7CDF0000-0x00007FFD7D8B2000-memory.dmp
memory/1488-7-0x00007FFD7CDF0000-0x00007FFD7D8B2000-memory.dmp
memory/1488-8-0x00007FFD7CDF0000-0x00007FFD7D8B2000-memory.dmp
memory/1488-9-0x00007FFD7CDF0000-0x00007FFD7D8B2000-memory.dmp
memory/1488-14-0x00007FFD7CDF0000-0x00007FFD7D8B2000-memory.dmp