General

  • Target

    AJProxy_4.66.exe

  • Size

    886KB

  • Sample

    241001-nh8dyawhnr

  • MD5

    fbb2d963c22e06daf4ea148c6ca01d61

  • SHA1

    138884e9148347a6fcc06c53a31adc85e3d38b5d

  • SHA256

    0a38a6c27c2579e83db76fb70d46a9343287bd746b2be2699a6695e4491697ab

  • SHA512

    bdf43a4b40ee69b2968ad4e8fd1ae9bca818583adc3610c54a2e3fbaa39505587f122194ca04f51a969368775c325a8d9c2caa350da1532466fb415a3019e653

  • SSDEEP

    12288:QTEYAsROAsrt/uxduo1jB0Y96qz/KhYU0Y5blYogDlcs7ojMjd6DobCAtMbHWC:QwT7rC6qz/KAY5blhgpcWtjd6EWAg2

Malware Config

Targets

    • Target

      AJProxy_4.66.exe

    • Size

      886KB

    • MD5

      fbb2d963c22e06daf4ea148c6ca01d61

    • SHA1

      138884e9148347a6fcc06c53a31adc85e3d38b5d

    • SHA256

      0a38a6c27c2579e83db76fb70d46a9343287bd746b2be2699a6695e4491697ab

    • SHA512

      bdf43a4b40ee69b2968ad4e8fd1ae9bca818583adc3610c54a2e3fbaa39505587f122194ca04f51a969368775c325a8d9c2caa350da1532466fb415a3019e653

    • SSDEEP

      12288:QTEYAsROAsrt/uxduo1jB0Y96qz/KhYU0Y5blYogDlcs7ojMjd6DobCAtMbHWC:QwT7rC6qz/KAY5blhgpcWtjd6EWAg2

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Drops startup file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks