goldenspy | 323d0cf9ac1c750761f66482154dbd3144dae7336c955a4576cb4cce6438a6ba | Triage

Sharing

General

Target

323d0cf9ac1c750761f66482154dbd3144dae7336c955a4576cb4cce6438a6ba
Size

1.1MB
Sample

220204-ml58bahcfl
MD5

eec690302795ed155f0b1ccc5b3bb9a9
SHA1

856956c954442ff1a1b91afcc01a3b5bcb82900c
SHA256

323d0cf9ac1c750761f66482154dbd3144dae7336c955a4576cb4cce6438a6ba
SHA512

7b95a8b3d9690e202d6d1c16b878c97921e6e386f6b509f1a5c24923722cf926d54f12b6792d5d901d0a39fcc38e630ffc356d3513a92db62077046fedccc152

Score

10^/10

goldenspy persistence

Malware Config

Targets

- Target
  
  323d0cf9ac1c750761f66482154dbd3144dae7336c955a4576cb4cce6438a6ba
- Size
  
  1.1MB
- MD5
  
  eec690302795ed155f0b1ccc5b3bb9a9
- SHA1
  
  856956c954442ff1a1b91afcc01a3b5bcb82900c
- SHA256
  
  323d0cf9ac1c750761f66482154dbd3144dae7336c955a4576cb4cce6438a6ba
- SHA512
  
  7b95a8b3d9690e202d6d1c16b878c97921e6e386f6b509f1a5c24923722cf926d54f12b6792d5d901d0a39fcc38e630ffc356d3513a92db62077046fedccc152
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2