General

  • Target

    PowerKuy4.57.exe

  • Size

    886KB

  • Sample

    241220-2fa8bawmen

  • MD5

    0cbf8ddcb4c1e9697f61c0644e1af778

  • SHA1

    8f37ed33b93199ca6c811a180cc5c8d9f4e8acdb

  • SHA256

    674ed0aeb9e02db2378da6923dc34c18c67840e0ab9c2b2b4267684a84201745

  • SHA512

    ea6f0658a7935da4549d9ddb696e8a9d9fd16bc180920345d16b06359cd7528fe4806a6c33f03e528e080ab0249609ec27330fdb9cff9eae9d27f0cded667430

  • SSDEEP

    24576:rwT7rC6qMqZ8Xt6i6/ZgkOp9v+1g8i/2Ad45C:CrC6qFWo3/Zu3oFgP6U

Malware Config

Targets

    • Target

      PowerKuy4.57.exe

    • Size

      886KB

    • MD5

      0cbf8ddcb4c1e9697f61c0644e1af778

    • SHA1

      8f37ed33b93199ca6c811a180cc5c8d9f4e8acdb

    • SHA256

      674ed0aeb9e02db2378da6923dc34c18c67840e0ab9c2b2b4267684a84201745

    • SHA512

      ea6f0658a7935da4549d9ddb696e8a9d9fd16bc180920345d16b06359cd7528fe4806a6c33f03e528e080ab0249609ec27330fdb9cff9eae9d27f0cded667430

    • SSDEEP

      24576:rwT7rC6qMqZ8Xt6i6/ZgkOp9v+1g8i/2Ad45C:CrC6qFWo3/Zu3oFgP6U

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Eternity family

    • Drops startup file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks