General
-
Target
New Project (5).png
-
Size
3KB
-
Sample
241217-1dhc6szlcj
-
MD5
c9015f6b768e0bf21903b9e0b699c295
-
SHA1
e46732d6651737b7e09def93aacbaca0bccc7b0f
-
SHA256
ae62b410c6161ac490d66477318a6630c0fe964d868cf1bea6a572f22f718963
-
SHA512
eccce6ecbad36aaa764a2d923716b5caffb657a234326983bc85fc97205552b28c9531ffbd102b7ab359fa951cac26b62d21a00cea50b45b74b41b5147aaa182
Static task
static1
Malware Config
Targets
-
-
Target
New Project (5).png
-
Size
3KB
-
MD5
c9015f6b768e0bf21903b9e0b699c295
-
SHA1
e46732d6651737b7e09def93aacbaca0bccc7b0f
-
SHA256
ae62b410c6161ac490d66477318a6630c0fe964d868cf1bea6a572f22f718963
-
SHA512
eccce6ecbad36aaa764a2d923716b5caffb657a234326983bc85fc97205552b28c9531ffbd102b7ab359fa951cac26b62d21a00cea50b45b74b41b5147aaa182
-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detects Eternity stealer
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Eternity family
-
Disables Task Manager via registry modification
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1