Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    26/03/2026, 03:58

General

  • Target
    2026-03-26_2b7ddd69dba983dc1285a529168a5ed9_amadey_cobalt-strike_elex_eternity-stealer_glassworm_luc.exe
  • Size 811KB
  • Sample260326-ej1wtafx2j
  • SHA256 460a9caf4862cae7dc85369693c8cc0ed42da84285afd770a3a88ab8b2d18421
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects Eternity stealer 2 IoCs
  • Eternity

    Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.

  • Eternity family
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-03-26_2b7ddd69dba983dc1285a529168a5ed9_amadey_cobalt-strike_elex_eternity-stealer_glassworm_luc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-03-26_2b7ddd69dba983dc1285a529168a5ed9_amadey_cobalt-strike_elex_eternity-stealer_glassworm_luc.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3028-0-0x00000000008F0000-0x00000000009C2000-memory.dmp

        memory/3028-1-0x00000000010D0000-0x00000000010D1000-memory.dmp

        memory/3028-2-0x00000000010D0000-0x00000000010D1000-memory.dmp

        memory/3028-3-0x000000001B710000-0x000000001B720000-memory.dmp

        memory/3028-4-0x0000000002AC0000-0x0000000002AFE000-memory.dmp

        memory/3028-5-0x00000000010D0000-0x00000000010D1000-memory.dmp

        memory/3028-6-0x00000000010E0000-0x00000000010EC000-memory.dmp

        memory/3028-7-0x000000001B710000-0x000000001B720000-memory.dmp