Overview

overview

10

Static

static

10

Jarvas-mai...bi.exe

windows7-x64

3

Jarvas-mai...bi.exe

windows10-2004-x64

3

Jarvas-main/gorm.exe

windows7-x64

10

Jarvas-main/gorm.exe

windows10-2004-x64

10

Jarvas-main/hook.ps1

windows7-x64

3

Jarvas-main/hook.ps1

windows10-2004-x64

8

Jarvas-mai...ion.js

windows7-x64

3

Jarvas-mai...ion.js

windows10-2004-x64

3

Jarvas-main/pwer.ps1

windows7-x64

3

Jarvas-main/pwer.ps1

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d54a029d39b25fbf88fc27e1a7e0d04b2d4e3fe90e8a445b3ce5b4093f14b28.zip

  • Size

    1.4MB

  • MD5

    18aed24496c772c713d14a1e9bcddc97

  • SHA1

    a5332cd58247c00307170f60079f4a51394751f0

  • SHA256

    8d54a029d39b25fbf88fc27e1a7e0d04b2d4e3fe90e8a445b3ce5b4093f14b28

  • SHA512

    1bbc75a9472b022dc24e52a20734c9e4d7e4b62f7b5e00636c47562633168c7d5015d0db6cfbd367e3542fd6a66bc85183ef8b9a90a840fc636e42a695bd2eb1

  • SSDEEP

    24576:L6iv94ojw5o+AKeyM3v1woD0Hie41EIdgyaNI7rigF/ToQ+vKBxPpqpdnA8c:L5v9tw5oDvyMCoDAZmEIdaNYrtcQaW9/

Score
10/10
eternity

Malware Config

Extracted

Family

eternity

Attributes
  • payload_urls

    https://github.com/MyPrincessAkira/Jarvas/raw/main/gorm.exe

    https://github.com/MyPrincessAkira/Jarvas/raw/main/Cqqjbi.exe

Extracted

Language
ps1
Source
URLs
exe.dropper

https://discord.com/api/webhooks/1207030572061429810/YCbwSoX3RSmP2FCgLJTGGO7qihDEEDzw4fc3Ryt5nF5I1-EVWYIQE9ewNP489-08kUcw

Extracted

Language
ps1
Source
URLs
exe.dropper

http://raw.githubusercontent.com/MyPrincessAkira/Jarvas/main/Cqqjbi.exe
exe.dropper

https://discord.com/api/webhooks/1207030572061429810/YCbwSoX3RSmP2FCgLJTGGO7qihDEEDzw4fc3Ryt5nF5I1-EVWYIQE9ewNP489-08kUcw

Signatures

  • Eternity family
    eternity
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d54a029d39b25fbf88fc27e1a7e0d04b2d4e3fe90e8a445b3ce5b4093f14b28.zip
    .zip
  • Jarvas-main/Cqqjbi.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Jarvas-main/README.md
  • Jarvas-main/dwnld_url_for_desc.txt
  • Jarvas-main/engagement.txt
  • Jarvas-main/engagement_comments.txt
  • Jarvas-main/gorm.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Jarvas-main/hook.dat
    .ps1
  • Jarvas-main/injection.js
    .js
  • Jarvas-main/pwer.dat
    .ps1
  • Jarvas-main/update.txt
  • Jarvas-main/version.txt
  • Jarvas-main/videos_redirect.txt