General

  • Target
    2026-02-28_5ec24485911df341816dba2bda67a18f_amadey_elex_eternity-stealer_glassworm_luca-stealer_lynx_njrat_redline-stealer
  • Size 1.0MB
  • Sample260228-eblf6aat3g
  • SHA256 4ea48a3ec104f6667a41608e52473ea41599d1e78ecadba40ce8d33fd7eb33b6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-02-28_5ec24485911df341816dba2bda67a18f_amadey_elex_eternity-stealer_glassworm_luca-stealer_lynx_njrat_redline-stealer
    • Size 1.0MB
    • SHA256 4ea48a3ec104f6667a41608e52473ea41599d1e78ecadba40ce8d33fd7eb33b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Detects Eternity stealer

    • Eternity

      Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

    • Eternity family

    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Modifies Windows Defender TamperProtection settings

    • Disables Task Manager via registry modification

    • Executes dropped EXE

    • Windows security modification

MITRE ATT&CK Enterprise v16

Tasks