General
-
Target
GABB.0.6.20.zip
-
Size
2.5MB
-
Sample
240613-2wgp2atfqf
-
MD5
9677bed9b47650af4ce668771025aa46
-
SHA1
e3976927340836348a63d53f8a4197587bfa9482
-
SHA256
c6d2e587b941ba4be62d9ca99e70db987a3a17a3128508cf69c86ac15e2d589b
-
SHA512
c8998b2c0609ec3b6ba7cf8c8504fbe4c535162426d11b08f3a088dee908bb6e6b59f86af447009690cd21657a7abdf0202ae86a977e2632a13918f59c16f26a
-
SSDEEP
49152:VIH+LrDl8CIZKWC8ulQiriV/jO2zdNzJYR31RF3p6CzRdWbgjcDPIjib:VnrDtWWfcOaNzqhtzRSgjcDPIjY
Behavioral task
behavioral1
Sample
GABB/GABB.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
GABB/GABB.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
GABB/GDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
GABB/GDLL.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
GABB/GABB.exe
-
Size
5.2MB
-
MD5
c90ce1a6c8c6185af5c85efa5a3d9eb2
-
SHA1
b4b2bc553bd0ed22c56c5288cd533f2e9eab1597
-
SHA256
4bcd41b460dc664cbeb181b9516d6ccc39eb78cfb9f7c106bf904634163a76ac
-
SHA512
dde898df373f3cdaadee89e7bb387be170e6c7959ecabee92dc8bb6de4de8d8164f51d2ba8b674c2dee33fbcc2700d3aa27cc47c67cd46cb4885791b83423772
-
SSDEEP
49152:MrC6q5wyKyKyKyKyOVoeWRd2Ru1j0IAibunmqJNAivkCnVHMDsXO1ak2zmByg2z3:MrGw////+F4rSO0Yhsp9v3eEj53f
-
Detects Eternity stealer
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
-
-
Target
GABB/GDLL.dll
-
Size
162KB
-
MD5
6c01964ad639600ac4193fa6f4a1f735
-
SHA1
92172aaee2f69b1afc657adc1a37a7d0b72e3363
-
SHA256
681460853a605827e516f0cbe03a2746bb068d2d7a11603d89e9ce2b2cb75380
-
SHA512
6093d7f405346d895f5154b076ccbb42fed41a1ca6e88e60369e30ad33773b9a4d36681fe6d9dc9a878cc3c8057c75f0b2b5d9858d654ba738fa4c8c9771c6c9
-
SSDEEP
3072:J+Os09onDko0wWN+S9k5hISQ8vZR+ycwNYDvRvuIoEFxnuzs:J+W9QoB+S89Q8vZR+yc/RvuIoEFx8s
Score1/10 -