c71abb880a784f14b4fd096b1add807f755c34fd46ad8dc264910db93f98dc5e

General

Target

GoldenEye.zip
Size

434KB
Sample

240520-z4kqjsge28
MD5

a0b7f95d5a47750e75bf7b9760b33e0d
SHA1

3f97c9e8dcf3fa2834b9ccff59f63e79bd125a76
SHA256

c71abb880a784f14b4fd096b1add807f755c34fd46ad8dc264910db93f98dc5e
SHA512

f8ca037554cf9f501e39a581d1243008f3a9e962a79ff42aabf8eee30b977fac53a7adae132807acda182acc76229fef2b2301d39d1e97c3fc9f806221c0b01d
SSDEEP

12288:Hw2iz87rxZ3mQZugizi1X83ILsfmytsLSMa9VvgR7:Qh0Z2QZus5nLSMaja7

Score

10^/10

Malware Config

Targets

- Target
  
  GoldenEye.zip
- Size
  
  434KB
- MD5
  
  a0b7f95d5a47750e75bf7b9760b33e0d
- SHA1
  
  3f97c9e8dcf3fa2834b9ccff59f63e79bd125a76
- SHA256
  
  c71abb880a784f14b4fd096b1add807f755c34fd46ad8dc264910db93f98dc5e
- SHA512
  
  f8ca037554cf9f501e39a581d1243008f3a9e962a79ff42aabf8eee30b977fac53a7adae132807acda182acc76229fef2b2301d39d1e97c3fc9f806221c0b01d
- SSDEEP
  
  12288:Hw2iz87rxZ3mQZugizi1X83ILsfmytsLSMa9VvgR7:Qh0Z2QZus5nLSMaja7
Score

1^/10
behavioral1
- Target
  
  GoldenEye.exe
- Size
  
  444KB
- MD5
  
  b9fc6e3e01054e805e0d9c06057e9ea6
- SHA1
  
  02d5867cc43677fcb636faa6dbd87b83dbabe2e7
- SHA256
  
  91efbbac5cbe753836ee1d898fed959cc7974b84f057a22251fe10fbfd3d426c
- SHA512
  
  6b1fe8d2e678dae1402584d67c2fb03472d678d72182ee130f24701ac709886ae2db91916ee45c87df9e3444310315eb14cd2a0607b222f130882d00b8f1c365
- SSDEEP
  
  12288:CF2itC7rxZjmoXuaiHi/Xy3I3sBmy1CLoMavDVv17:4HSZqoXuWPzloMaht7
Score

10^/10

evasion execution persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral2