General
- Target 2026-08-08_b236efc541c4ab3ceaeaf09d6d3bd2d9_amadey_cobalt-strike_elex_eternity-stealer_glassworm_icedid_luca-stealer_lynx_njrat_redline-stealer_stealc_vidar
- Size 3.1MB
- Sample260808-jjnnpswve1
- SHA256 2ee2b76343e04a9e1abdb057a007b76055533bdd1b5e8285d1428a81f84ca054
- MD5 b236efc541c4ab3ceaeaf09d6d3bd2d9
- SHA1 3200c40b2d7c68716f357150fd7bb80a568b0d41
- SHA512 5dcac96fda700d4df981a95178a520343eeac6c5ad2dfc313af20b87280a31c1cee465d0dbde416a1295d726014ed9fccfd368e946c8c18d257cae7833391c86
- SSDEEP 49152:YrC6qKZ096lvqFdMW7ptLObnKDBfsxKunHZDCQnC0vEHU2C8MOkmkYY/flQrkwPX:YrK60FXbOIsxKuxnC0cHbC8TGYmflM
- TLSH T17DE5010673E40EAAE176523588A35AD2E235F8100B1187DF27D072662F6F7E1BF36752
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_b236efc541c4ab3ceaeaf09d6d3bd2d9_amadey_cobalt-strike_elex_eternity-stealer_glassworm_ice.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b236efc541c4ab3ceaeaf09d6d3bd2d9_amadey_cobalt-strike_elex_eternity-stealer_glassworm_icedid_luca-stealer_lynx_njrat_redline-stealer_stealc_vidar
- Size 3.1MB
- SHA256 2ee2b76343e04a9e1abdb057a007b76055533bdd1b5e8285d1428a81f84ca054
- MD5 b236efc541c4ab3ceaeaf09d6d3bd2d9
- SHA1 3200c40b2d7c68716f357150fd7bb80a568b0d41
- SHA512 5dcac96fda700d4df981a95178a520343eeac6c5ad2dfc313af20b87280a31c1cee465d0dbde416a1295d726014ed9fccfd368e946c8c18d257cae7833391c86
- SSDEEP 49152:YrC6qKZ096lvqFdMW7ptLObnKDBfsxKunHZDCQnC0vEHU2C8MOkmkYY/flQrkwPX:YrK60FXbOIsxKuxnC0cHbC8TGYmflM
- TLSH T17DE5010673E40EAAE176523588A35AD2E235F8100B1187DF27D072662F6F7E1BF36752
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Eternity stealer
-
Family: Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE