General

  • Target

    Eternity.zip

  • Size

    35.0MB

  • Sample

    240715-acj79sydmr

  • MD5

    087e21b251a1567c10526376837a4bbc

  • SHA1

    802ca49bfb4fa037608cc210344479e26c92a9fe

  • SHA256

    a22b363a7dce6163c6338ece398265d8d166bc232466619c9a3e45f4530600b8

  • SHA512

    733b9ba11aeb8d089665dc018bba0b6f9723b5a215a8fc77ac748bbf3af3dd77d114f984d821824d16d28a8be014bc781146e43d05e84fb23c9c1a033cb54424

  • SSDEEP

    786432:yhUT6NDYZyaFEPdjHmHkxDrXDxgqiJ4B56ww6aGfk4:kUTqIydpmMDxgqiJ471w6aGfx

Malware Config

Targets

    • Target

      Eternity.exe

    • Size

      40.8MB

    • MD5

      40f0212fa97e2fe44ee0fbffae0c96b5

    • SHA1

      e11664504e7b3ab905de8069e6fb5b1159aec002

    • SHA256

      32d38e1eae86466254658d5a91a8bca983706b3aec35148012cb0a50f550a74f

    • SHA512

      2eeebc345f202033762cfa1e5ae4a2b2f477dad7e7019e5aff7b3aff98d0a9ee7c2223a94dfb6cc1a6fd66eb0290adee3baa1fda8d99658253c005ca11f425f5

    • SSDEEP

      786432:gHvsyBy7Mu30RSVRAaAeQc98NmhJQ8mZoJRWUmx2qmE:gUyCMrUVKa/bhJQ8mZorV+

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Growtopia

      Growtopa is an opensource modular stealer written in C#.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks