Overview

overview

10

Static

static

3

869395ac2a...18.exe

windows7-x64

10

869395ac2a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    869395ac2a88f6de036daf942d0b86d9_JaffaCakes118

  • Size

    913KB

  • Sample

    241102-vnj2vszfke

  • MD5

    869395ac2a88f6de036daf942d0b86d9

  • SHA1

    42fbe6f668153bcb850c13677efe924e835c229f

  • SHA256

    cd72f8f3af6f9d098b3da55db5f7869ab75ec679e0c302f790faffc0fa6c47b5

  • SHA512

    e2e8492442edcfec16553def0cae3361f744bc8f095b4863dbc745ac3e72c75e1be83bbb0bb69da4f74fcaaba2b35123222706508c0d1f0e05e22cbcb75390d9

  • SSDEEP

    24576:rMYtHtnX4mHxjdibimBr4aOCZv4NPjgcwmIlSklG9:dtHtnX4mHObiMr4HCZvRzlJl

Score
10/10
eternityevasionstealertrojan

Malware Config

Targets

    • Target

      869395ac2a88f6de036daf942d0b86d9_JaffaCakes118

    • Size

      913KB

    • MD5

      869395ac2a88f6de036daf942d0b86d9

    • SHA1

      42fbe6f668153bcb850c13677efe924e835c229f

    • SHA256

      cd72f8f3af6f9d098b3da55db5f7869ab75ec679e0c302f790faffc0fa6c47b5

    • SHA512

      e2e8492442edcfec16553def0cae3361f744bc8f095b4863dbc745ac3e72c75e1be83bbb0bb69da4f74fcaaba2b35123222706508c0d1f0e05e22cbcb75390d9

    • SSDEEP

      24576:rMYtHtnX4mHxjdibimBr4aOCZv4NPjgcwmIlSklG9:dtHtnX4mHObiMr4HCZvRzlJl

    Score
    10/10
    eternityevasionstealertrojan

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Detects Eternity stealer

      stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

      eternity

    • Eternity family

      eternity

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks