Overview

overview

10

Static

static

10

64e19daf02...0N.exe

windows7-x64

10

64e19daf02...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64e19daf02b572ffd7b81e175fa940a0N.exe

  • Size

    1.7MB

  • Sample

    240807-e818wa1enk

  • MD5

    64e19daf02b572ffd7b81e175fa940a0

  • SHA1

    ea28461cc50e677e07894f255aaeff5b8b01872e

  • SHA256

    11453557f9a4bd7517eef24e5ec81d249ed5a1ad6a407508835412193217914a

  • SHA512

    2f7c59250d351a6522612265a844a1dc30660edb20640326d64809e517610a84a5b118d071db7105537e7a43307fd7f9052978deb6cae61c07754ca431123da8

  • SSDEEP

    12288:LTEYAsROAsrt/uxduo1jB0Y96qtfx5TyC0ISk6meNsRrIlfnWSuNFIWNATBIr9s2:LwT7rC6qRx9bibmwAefqInTWGTJpGx9

Score
10/10
eternitydiscoveryevasionstealertrojan

Malware Config

Targets

    • Target

      64e19daf02b572ffd7b81e175fa940a0N.exe

    • Size

      1.7MB

    • MD5

      64e19daf02b572ffd7b81e175fa940a0

    • SHA1

      ea28461cc50e677e07894f255aaeff5b8b01872e

    • SHA256

      11453557f9a4bd7517eef24e5ec81d249ed5a1ad6a407508835412193217914a

    • SHA512

      2f7c59250d351a6522612265a844a1dc30660edb20640326d64809e517610a84a5b118d071db7105537e7a43307fd7f9052978deb6cae61c07754ca431123da8

    • SSDEEP

      12288:LTEYAsROAsrt/uxduo1jB0Y96qtfx5TyC0ISk6meNsRrIlfnWSuNFIWNATBIr9s2:LwT7rC6qRx9bibmwAefqInTWGTJpGx9

    Score
    10/10
    eternityevasionstealertrojandiscovery

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Disables Task Manager via registry modification

      evasion

    • Drops startup file

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks