General

  • Target
    2026-02-10_0040df58dec2a37687a885bf1a2ac099_amadey_cobalt-strike_elex_eternity-stealer_glassworm_luca-stealer_lynx_njrat_redline-stealer
  • Size 821KB
  • Sample260210-pl8dsads7d
  • SHA256 99dacfaffe443309956d4ffa10b58e5c87de6c73339473712d9ade2cda57c923
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-02-10_0040df58dec2a37687a885bf1a2ac099_amadey_cobalt-strike_elex_eternity-stealer_glassworm_luca-stealer_lynx_njrat_redline-stealer
    • Size 821KB
    • SHA256 99dacfaffe443309956d4ffa10b58e5c87de6c73339473712d9ade2cda57c923
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Eternity family

    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Modifies Windows Defender TamperProtection settings

    • Disables Task Manager via registry modification

    • Executes dropped EXE

    • Windows security modification

MITRE ATT&CK Enterprise v16

Tasks