goldenspy | 817887f4e977443cb446579f080ae848a2235b79f8c174e7201cebf62e9ccd94 | Triage

Sharing

General

Target

817887f4e977443cb446579f080ae848a2235b79f8c174e7201cebf62e9ccd94
Size

4.0MB
Sample

220204-mca1tahah5
MD5

2f47656cafc2c6ed0c5a5d7bcbdc74c0
SHA1

ddbac1755c6d1f564d54e11f4cb2fb24e9a86dfb
SHA256

817887f4e977443cb446579f080ae848a2235b79f8c174e7201cebf62e9ccd94
SHA512

b4bcd5095c1213e772cc5a944735609a5d7a72994d0f23a737081ae6d46615bd2d1856054f884ff4512c0080deb6f08d6229f5220afb76fc452c555205a00d8c

Score

10^/10

goldenspy persistence

Malware Config

Targets

- Target
  
  817887f4e977443cb446579f080ae848a2235b79f8c174e7201cebf62e9ccd94
- Size
  
  4.0MB
- MD5
  
  2f47656cafc2c6ed0c5a5d7bcbdc74c0
- SHA1
  
  ddbac1755c6d1f564d54e11f4cb2fb24e9a86dfb
- SHA256
  
  817887f4e977443cb446579f080ae848a2235b79f8c174e7201cebf62e9ccd94
- SHA512
  
  b4bcd5095c1213e772cc5a944735609a5d7a72994d0f23a737081ae6d46615bd2d1856054f884ff4512c0080deb6f08d6229f5220afb76fc452c555205a00d8c
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2