General

  • Target

    ToxiaFarm.rar

  • Size

    627KB

  • Sample

    250107-x6fhhavney

  • MD5

    907b06ef17ffccdf1c34c31417b4c002

  • SHA1

    565279cb35c892084b637864b920a67d1abea93a

  • SHA256

    118591dd7d5de350121cf23756b1a8dd2d57498bcf105129d6e24613bf4f910e

  • SHA512

    bf82c79b1d9d0725a0a59f81961ce1dc69bb4ff5d3963238b33f4010938b87c589c919a6f24b1aa970a905d2026180c0b886cb27a5c7b22fe5015473f0599b41

  • SSDEEP

    12288:ZQ+/+pf0LsWtNbYBItF+bJT4WRKPuqAOUy8vWzXiymhwtPV0J7qmYDTtL1DbpMN/:FjsWNYGz+baw1vuXiymuV8qBHpMcRC

Malware Config

Targets

    • Target

      ToxiaFarm/Toxia.exe

    • Size

      1.3MB

    • MD5

      418e10ef96829bcc4e1cf401a9292a79

    • SHA1

      f1b3c5191cdb167bc92110cd3228eac1d7826314

    • SHA256

      9602514ab2e12bcba98dd4d6c655d41ed27cf6f39303bd111b479b697e6e76b8

    • SHA512

      12c648f2fe83c98f65ed3b23b1e5021e398330afc13ebaf7626a61530ec6ad9c1eb5b418501891c606b0aef400ee71c01e18e9f58910de1e3f7578d4cc92af13

    • SSDEEP

      12288:HTEYAsROAsrt/uxduo1jB0Y96qc29b2kt364qPyPJ1eC09OjrILrnSqvSqGsfZ2f:HwT7rC6qdt36bPeJpZKTI6ot3

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Eternity family

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks