General
- Target 2026-02-28_5ec24485911df341816dba2bda67a18f_amadey_elex_eternity-stealer_glassworm_luca-stealer_lynx_njrat_redline-stealer
- Size 1.0MB
- Sample260228-eblf6aat3g
- SHA256 4ea48a3ec104f6667a41608e52473ea41599d1e78ecadba40ce8d33fd7eb33b6
- MD5 5ec24485911df341816dba2bda67a18f
- SHA1 d0798218621631c952854106f075f5adc0d0c3eb
- SHA512 7892cc33dd43d254e120f637b496631fe71ddadd42c81a76ea93a1267f833adc20acf6695af222c95c8274d70422a1152b0a092330fe1f9d6969dbd667f91f13
- SSDEEP 24576:jwT7rC6qqVf3yqpdEpcagR99Bx0ZOMzV:qrC6qq/pdIIR9OFz
- TLSH T1DD25BF0477948D22D4D70B76C09893F10D76FC292A529AFE316CB21D4AAE350ED6DB3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-02-28_5ec24485911df341816dba2bda67a18f_amadey_elex_eternity-stealer_glassworm_luca-stealer_lynx_njrat_redline-stealer.exe
Resource
win10v2004-20260129-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-02-28_5ec24485911df341816dba2bda67a18f_amadey_elex_eternity-stealer_glassworm_luca-stealer_lynx_njrat_redline-stealer
- Size 1.0MB
- SHA256 4ea48a3ec104f6667a41608e52473ea41599d1e78ecadba40ce8d33fd7eb33b6
- MD5 5ec24485911df341816dba2bda67a18f
- SHA1 d0798218621631c952854106f075f5adc0d0c3eb
- SHA512 7892cc33dd43d254e120f637b496631fe71ddadd42c81a76ea93a1267f833adc20acf6695af222c95c8274d70422a1152b0a092330fe1f9d6969dbd667f91f13
- SSDEEP 24576:jwT7rC6qqVf3yqpdEpcagR99Bx0ZOMzV:qrC6qq/pdIIR9OFz
- TLSH T1DD25BF0477948D22D4D70B76C09893F10D76FC292A529AFE316CB21D4AAE350ED6DB3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contains code to disable Windows Defender
A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
-
Detects Eternity stealer
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Eternity family
-
Modifies Windows Defender Real-time Protection settings
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Windows security modification