Overview

overview

10

Static

static

10

2024-04-27...ye.exe

windows7-x64

9

2024-04-27...ye.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_ab37de6b8a20c8831219b4b395fb78b0_goldeneye

  • Size

    408KB

  • Sample

    240427-2lcckaab73

  • MD5

    ab37de6b8a20c8831219b4b395fb78b0

  • SHA1

    48304c3ce6f2668480c2b67ea519a764195edcb3

  • SHA256

    0ad2c127d7a6a0761baa91e2872cf7552eaeb00761810183da1e68aa454c0d2a

  • SHA512

    abeb8e3aa71d4497a7561092025e54e9d752ca529a9edb1e16306689044a41f66343f032a8b3f0abbdb1ad948100e44b96060d02362442cf47bb171cc5418236

  • SSDEEP

    3072:CEGh0o8l3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBft:CEGWldOe2MUVg3vTeKcAEciTBqr3jy9

Score
10/10
persistence

Malware Config

Targets

    • Target

      2024-04-27_ab37de6b8a20c8831219b4b395fb78b0_goldeneye

    • Size

      408KB

    • MD5

      ab37de6b8a20c8831219b4b395fb78b0

    • SHA1

      48304c3ce6f2668480c2b67ea519a764195edcb3

    • SHA256

      0ad2c127d7a6a0761baa91e2872cf7552eaeb00761810183da1e68aa454c0d2a

    • SHA512

      abeb8e3aa71d4497a7561092025e54e9d752ca529a9edb1e16306689044a41f66343f032a8b3f0abbdb1ad948100e44b96060d02362442cf47bb171cc5418236

    • SSDEEP

      3072:CEGh0o8l3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBft:CEGWldOe2MUVg3vTeKcAEciTBqr3jy9

    Score
    9/10
    persistence

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks