General

  • Target

    monk fish complete with background_LE_auto_x4_no_background.png

  • Size

    406KB

  • Sample

    241217-1fjn1szlhk

  • MD5

    b3e6b9787924ad7ba9dd692908a1af43

  • SHA1

    45425326b3df108dbb9a81ff9f498dd74d14267c

  • SHA256

    781990bdb6e701d3f834a021f055e30dee58ceec62de77b77e2ed8ead4498ac0

  • SHA512

    b69268b2706fc13c8f707911fa241fca1c545d5889fbe86cbd68318a3169aacbe780f322c109c8e61d9ed42633197da1db0d1c1683450378dde1113f78fd9582

  • SSDEEP

    12288:pP2yLkqbsEM/RaBGhyMyjYiiqrghZ6YKZ5bypmQ0EMA:pnLkqsEM/8B8lyjYiOP0ypf0tA

Malware Config

Targets

    • Target

      monk fish complete with background_LE_auto_x4_no_background.png

    • Size

      406KB

    • MD5

      b3e6b9787924ad7ba9dd692908a1af43

    • SHA1

      45425326b3df108dbb9a81ff9f498dd74d14267c

    • SHA256

      781990bdb6e701d3f834a021f055e30dee58ceec62de77b77e2ed8ead4498ac0

    • SHA512

      b69268b2706fc13c8f707911fa241fca1c545d5889fbe86cbd68318a3169aacbe780f322c109c8e61d9ed42633197da1db0d1c1683450378dde1113f78fd9582

    • SSDEEP

      12288:pP2yLkqbsEM/RaBGhyMyjYiiqrghZ6YKZ5bypmQ0EMA:pnLkqsEM/8B8lyjYiOP0ypf0tA

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Eternity family

    • Disables Task Manager via registry modification

    • A potential corporate email address has been identified in the URL: [email protected]

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks