eternity | Project_GrowZ[.]zip

resource	yara_rule
static1/unpack001/Project GrowZ/Project GrowZ/Project GrowZ.exe	eternity_stealer

resource
unpack001/Project GrowZ/Project GrowZ/Project GrowZ.exe

Project_GrowZ.zip

SHA256 8ea705980cb9a8b9de945344c8a93b3bd3e182b23e324ef8119c18a46afbbf0b
MD5 863acaa4c1950d77d9c65227d3b6a443
SHA1 a680954a6e30a850b6bec1664738b60eb4a60a80
SHA512 55252369dcc3c74c35a5254ca435cd40d9ea86bf7e2bad70692058c8c1529ca8befa9e47f5a5c4ebca7d2ddfa55388860cb999b6af93e4f800c2986bbfe23d5b
SSDEEP 24576:Tkp/kXSHzIa0SakwNiKn12d62HiherVBuRnMXGD8j2:TFSH0xAkEwUiheBBmnO2p
TLSH
T11215336E247D68C3A15DABFBD4EC5E8373DF0EC25C04669A8F5436712A02715E27EE20
MD5 SHA1 SHA512 SSDEEP TLSH

Project GrowZ/Project GrowZ/Emgu.CV.Platform.NetStandard.xml

SHA256 631d0a243a0a77df95cb743c32f00d0593a136a3008331b2e6d85c1b51d92c51
MD5 309b25db87a5705bbcaf6c7692dc0438
SHA1 3b0c0bb433bbb5d0cc3ef57a4f582a4974d1a6be
SHA512 5f08ef45a963228c371744e124d709b9901d40294491499918cc161bfad05e69c87930cf60440244d79400d45fbfa98f737d162b4c04cce9f70789c07ebcdaac
SSDEEP 49152:lq1Hj2pXJiN1Nq4cjBmeAkz5JB/JiHKHd+TBYe1d2SFDHZ2hBWvYlASCY0tMo1Xh:Rq
TLSH
T16CB50E247AC15E228C3302166E69F4D4FEE958B330595A56308D3FA35F7ACE2D3AF950
MD5 SHA1 SHA512 SSDEEP TLSH

Project GrowZ/Project GrowZ/Newtonsoft.Json.xml

SHA256 2d46b37b086d6848af5f021d2d7a40581ce78aadd8ee39d309aee4771a0eeccf
MD5 f414b3f68fe7c4f094b8fe8382f858c9
SHA1 66ee1b3266fcedde433b392156ab4a24262b2f34
SHA512 19b2feb40c2e9d4d20d9a21f88f6ecea773060c056b8cbbd21a6eec41486dc5fc101e6c31129b0d53466d04709bcd4ed777058ddfb02532242b43e253a7b24bd
SSDEEP 6144:XqqUmk/RikeaG0rH3jGHdl0/InHHpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DUq
TLSH
T1F5E4E02577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
MD5 SHA1 SHA512 SSDEEP TLSH

Project GrowZ/Project GrowZ/Project GrowZ.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e7b325246671772643f1c287ca721f25663c966173ae11019be6a643460dc43d
MD5 3c63079553e063bf6b8ae52bd2145b71
SHA1 9564de9fc122a72bd86c57bb073347fd577f6427
SHA512 a8a23387a135b0ece0174a26784a5fd7eab09843fd917d0bf64ffeafda9a8c8eb90d2f3285ac3bf9e2ffeb167ad16821f1414e0665b63fd6dd02026ee5fe4bcf
SSDEEP 12288:eTEYAsROAsrt/uxduo1jB0Y96qXKcN1BhvEnVi/SnZNZIQ7NS9ui2w/+jXP:ewT7rC6qXKcNTh8VkMZNZd7a2y+jX
TLSH
T17915BF2177ECCF36C267833A48E71AF14676B0961E52D7CBE35536B4BE1C2839A11227
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects Eternity stealer

stealer
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

280270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Project GrowZ/Project GrowZ/System.Buffers.xml

SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
MD5 1c55860dd93297a6ea2fad2974834c3a
SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
TLSH
T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
MD5 SHA1 SHA512 TLSH

Project GrowZ/Project GrowZ/System.CodeDom.xml

SHA256 8d3347a4f602a5758a0aae932b0c6010f37155420d2c5f255b4cb9adc6f15b63
MD5 c8f31eeeef8e41c603926f8d803f0edb
SHA1 0b01a58f39cdc17cd69ae51d3811bf9be3f327d6
SHA512 d048fbe671aa6a4ea2da0866452788abca7a6759d857b9f0a93650d39f0ecc72fc84b9cff307d7b489f5ee08e3cbc89e228e673320b2ac853245e33d21590061
SSDEEP 96:V6G/PmtZ7UzV7qxsg/HcDzbPGArWNGJFoSmrW1l4DP7pC78X7bdBj8c:V6GXmtZ7UReagUzzaIISmrWraT7
TLSH
T138E1DD1567C0EA250D7201576E98F8C4FF6A5A37059E9C3E358C2E5B6F7398332BB260
MD5 SHA1 SHA512 SSDEEP TLSH

Project GrowZ/Project GrowZ/System.Diagnostics.DiagnosticSource.xml

SHA256 1784132ae3698467a0985b2507d63bdcf19a7970afe3a39d86e36c018c98b29d
MD5 5e91fe301415aced2f304f136a8ebd82
SHA1 31d457e46227f16286f7b52b728208de8970abbf
SHA512 6f99fccc2e35e4ba8d2054d4cb5787bb48ba4364d5181d59825400e6ed9f6a1318197810b3b908e726173ccfd4f23a1871417045174e160c7073c7adca831add
SSDEEP 384:VsKIrXkz1ukSA8Q3vK0mN2I5IiIjI7ImIWIHHtL90/6q6M:VsLA8Q3vK0HY6rM
TLSH
T121D2303BF7849B280C7702227B44F488E6365AAB103198B9B6CC5F9B5F32C69537B495
MD5 SHA1 SHA512 SSDEEP TLSH

Project GrowZ/Project GrowZ/System.Runtime.CompilerServices.Unsafe.xml

SHA256 39c2d4a63a186d423e9c866f4d3e9a6acba0103398f20baf8b92a38744894215
MD5 c782e92abbfc0531226f735c6ac56498
SHA1 2586fdbeb6d1e11d4cecd5b3e8387a18c7b4d350
SHA512 a12b6807695c9c626de9602abc6df72bcc5e869a29c7111e956034f321436e7c50ea36ed5ec5b6f93a639ae0f7aea93953e91ae557bf423a749b036c7252a7b9
SSDEEP 384:Y/uXukudyvmB0fmkcdZKyQe1EyriJriurs8rsF9vVwFaFDJOeOtOEKFzUxRkj1r:Y/ApEwmafmkcdZbQe1EyriJriurs8rsR
TLSH
T15E92AD243BCA5FA21772031D9E1AF1C9EE21957B308CA84134DC6C7377ADDEA4A7B560
MD5 SHA1 SHA512 SSDEEP TLSH

Project_GrowZ.zip

Project GrowZ/Project GrowZ/Emgu.CV.Platform.NetStandard.xml

Project GrowZ/Project GrowZ/Newtonsoft.Json.xml

Project GrowZ/Project GrowZ/Project GrowZ.exe

mscoree

dotnet

Project GrowZ/Project GrowZ/System.Buffers.xml

Project GrowZ/Project GrowZ/System.CodeDom.xml

Project GrowZ/Project GrowZ/System.Diagnostics.DiagnosticSource.xml

Project GrowZ/Project GrowZ/System.Runtime.CompilerServices.Unsafe.xml

Sharing

General

Malware Config

Signatures

File Explorer

Project_GrowZ.zip

Project GrowZ/Project GrowZ/Emgu.CV.Platform.NetStandard.xml

Project GrowZ/Project GrowZ/Newtonsoft.Json.xml

Project GrowZ/Project GrowZ/Project GrowZ.exe

mscoree

dotnet

Project GrowZ/Project GrowZ/System.Buffers.xml

Project GrowZ/Project GrowZ/System.CodeDom.xml

Project GrowZ/Project GrowZ/System.Diagnostics.DiagnosticSource.xml

Project GrowZ/Project GrowZ/System.Runtime.CompilerServices.Unsafe.xml