Overview

overview

10

Static

static

10

2024-05-22...ye.exe

windows7-x64

9

2024-05-22...ye.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-22_137c0d0b6237fe97d74aec2aeca0d674_goldeneye

  • Size

    380KB

  • Sample

    240522-eakhgaah99

  • MD5

    137c0d0b6237fe97d74aec2aeca0d674

  • SHA1

    f453d1f7e3383c04f0689227d42402b069659d46

  • SHA256

    7b25b20b5edb6335fb45fafba44e9943c73ee673fc7b17ba0700ccf75952a482

  • SHA512

    d7784cf955a6086e61d6ba5adf068ac8a8f47b19809d935dc91d3e0a66da66f037bcf67813dc01e5a0c055f48700c31951026ed49166e32cfd15c9b10500a437

  • SSDEEP

    3072:mEGh0oYlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGKl7Oe2MUVg3v2IneKcAEcARy

Score
10/10
persistence

Malware Config

Targets

    • Target

      2024-05-22_137c0d0b6237fe97d74aec2aeca0d674_goldeneye

    • Size

      380KB

    • MD5

      137c0d0b6237fe97d74aec2aeca0d674

    • SHA1

      f453d1f7e3383c04f0689227d42402b069659d46

    • SHA256

      7b25b20b5edb6335fb45fafba44e9943c73ee673fc7b17ba0700ccf75952a482

    • SHA512

      d7784cf955a6086e61d6ba5adf068ac8a8f47b19809d935dc91d3e0a66da66f037bcf67813dc01e5a0c055f48700c31951026ed49166e32cfd15c9b10500a437

    • SSDEEP

      3072:mEGh0oYlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGKl7Oe2MUVg3v2IneKcAEcARy

    Score
    9/10
    persistence

    • Auto-generated rule

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks