goldenspy | e41102043cfb9279cf1aafa89de7336a5d94fcfd0217eb590b36d119bbfaaa0f | Triage

Sharing

General

Target

e41102043cfb9279cf1aafa89de7336a5d94fcfd0217eb590b36d119bbfaaa0f
Size

518KB
Sample

220204-l4fjyahabj
MD5

c75b885ac2e07a827c5d962795db1a79
SHA1

a88fa1e8854d30fd6ce07ba13ce0cbc727f5bf60
SHA256

e41102043cfb9279cf1aafa89de7336a5d94fcfd0217eb590b36d119bbfaaa0f
SHA512

b39f3d6e11dd775bffcd243d0e9e6b02b551e40db85c69456a7527b638896ecdf11d4c98209b3c7cac23d37bc60e1ac5b6c63411759c2f6f83ac131945a11f7d

Score

10^/10

goldenspy persistence

Malware Config

Targets

- Target
  
  e41102043cfb9279cf1aafa89de7336a5d94fcfd0217eb590b36d119bbfaaa0f
- Size
  
  518KB
- MD5
  
  c75b885ac2e07a827c5d962795db1a79
- SHA1
  
  a88fa1e8854d30fd6ce07ba13ce0cbc727f5bf60
- SHA256
  
  e41102043cfb9279cf1aafa89de7336a5d94fcfd0217eb590b36d119bbfaaa0f
- SHA512
  
  b39f3d6e11dd775bffcd243d0e9e6b02b551e40db85c69456a7527b638896ecdf11d4c98209b3c7cac23d37bc60e1ac5b6c63411759c2f6f83ac131945a11f7d
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2