Overview

overview

10

Static

static

10

2024-04-03...ye.exe

windows7-x64

9

2024-04-03...ye.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-03_ce91d0c905bccaba39047e0175c6b6cf_goldeneye

  • Size

    168KB

  • Sample

    240403-hkelraag86

  • MD5

    ce91d0c905bccaba39047e0175c6b6cf

  • SHA1

    a3f82237a9838a73f60542f1c5fef3fbc41111e4

  • SHA256

    d74c9b9e40f432e631b7dd623eb5195680242079fa0abfb2d34d3c15d91e615f

  • SHA512

    cffde8743d59216a2988ef01044139ad08740c99574e79cb71a3840a87df9d7bdedd15ee0122b86920a1e2b16832e45a1b0af871d4c278fda03ffe44014c9842

  • SSDEEP

    1536:1EGh0oVlq5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0oVlqOPOe2MUVg3Ve+rX

Score
10/10
persistence

Malware Config

Targets

    • Target

      2024-04-03_ce91d0c905bccaba39047e0175c6b6cf_goldeneye

    • Size

      168KB

    • MD5

      ce91d0c905bccaba39047e0175c6b6cf

    • SHA1

      a3f82237a9838a73f60542f1c5fef3fbc41111e4

    • SHA256

      d74c9b9e40f432e631b7dd623eb5195680242079fa0abfb2d34d3c15d91e615f

    • SHA512

      cffde8743d59216a2988ef01044139ad08740c99574e79cb71a3840a87df9d7bdedd15ee0122b86920a1e2b16832e45a1b0af871d4c278fda03ffe44014c9842

    • SSDEEP

      1536:1EGh0oVlq5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0oVlqOPOe2MUVg3Ve+rX

    Score
    9/10
    persistence

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks