Overview

overview

10

Static

static

10

2f95069e83...18.exe

windows7-x64

10

2f95069e83...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f95069e8373f2b35e59e6d6bd71e1d0_JaffaCakes118

  • Size

    4.8MB

  • Sample

    241009-mm9bcszgln

  • MD5

    2f95069e8373f2b35e59e6d6bd71e1d0

  • SHA1

    fcbe39d44aee26450619bdffb671513e1296a283

  • SHA256

    1b0c54e9fb3841917d4b392ecfc8b4aa039f00b04684cc141a718b022493ccea

  • SHA512

    9ef838114a8cdbaa8e06bf9a0b45adc2047b9ce3e7c87cd6e87ee2133bdc07498b9ee8aa0f63a7f7412ef7d31f8837f63e6935c7bfd15ec6673f6f41f386ca48

  • SSDEEP

    98304:7rONEVJyZlng4p2VbC2FQD9PvsXDW2stC5mn:SEVcn1pYFQDZcWXtC5

Score
10/10
eternitystealer

Malware Config

Targets

    • Target

      2f95069e8373f2b35e59e6d6bd71e1d0_JaffaCakes118

    • Size

      4.8MB

    • MD5

      2f95069e8373f2b35e59e6d6bd71e1d0

    • SHA1

      fcbe39d44aee26450619bdffb671513e1296a283

    • SHA256

      1b0c54e9fb3841917d4b392ecfc8b4aa039f00b04684cc141a718b022493ccea

    • SHA512

      9ef838114a8cdbaa8e06bf9a0b45adc2047b9ce3e7c87cd6e87ee2133bdc07498b9ee8aa0f63a7f7412ef7d31f8837f63e6935c7bfd15ec6673f6f41f386ca48

    • SSDEEP

      98304:7rONEVJyZlng4p2VbC2FQD9PvsXDW2stC5mn:SEVcn1pYFQDZcWXtC5

    Score
    10/10
    eternitystealer

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks