General

  • Target

    hmKBg8jjXR

  • Size

    10KB

  • Sample

    241201-f8ns8axpg1

  • MD5

    b3b36dbf184e4e73bc1939036af7b3d3

  • SHA1

    1606269a3caa2251e90b81faa688619745d22d94

  • SHA256

    ec404dcd1803afcd25cdeccdcea7078204e2a63789c2e02eb721bdfa94b20c98

  • SHA512

    88c3994a80a5cbced62f9d01092f34bbced9e7c6f4959158569465227b38521942bce45333b5c80a25f82439b1c239f875cf730fdb9b129e0684373271aa1ea1

  • SSDEEP

    96:AKQf4iKKwOfRrcLHLYRe5mvtgCsXe5oE9Anx/IJ:BQAkRrcLnoVNanx/0

Malware Config

Targets

    • Target

      hmKBg8jjXR

    • Size

      10KB

    • MD5

      b3b36dbf184e4e73bc1939036af7b3d3

    • SHA1

      1606269a3caa2251e90b81faa688619745d22d94

    • SHA256

      ec404dcd1803afcd25cdeccdcea7078204e2a63789c2e02eb721bdfa94b20c98

    • SHA512

      88c3994a80a5cbced62f9d01092f34bbced9e7c6f4959158569465227b38521942bce45333b5c80a25f82439b1c239f875cf730fdb9b129e0684373271aa1ea1

    • SSDEEP

      96:AKQf4iKKwOfRrcLHLYRe5mvtgCsXe5oE9Anx/IJ:BQAkRrcLnoVNanx/0

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Eternity family

    • Downloads MZ/PE file

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks