76a836c7692328c1a5346cc053cc771e441a781f30b2ff1532afee6a139144ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-05_ec84a992592d437b486e4256a900df0f_goldeneye
Size

197KB
Sample

240705-x4llqstepr
MD5

ec84a992592d437b486e4256a900df0f
SHA1

81b116b3f10585b221f8be8e821f59c197c0f4d7
SHA256

76a836c7692328c1a5346cc053cc771e441a781f30b2ff1532afee6a139144ed
SHA512

fe3e34fda3bb2b247c09f5e589f17cafee3340cc4afa51696f995ae82b18394f1bcad2eccedf9a53c5a00d2c1b96814d82839e1d67f1b4bcb7edc03ee3f63d06
SSDEEP

3072:jEGh0ozl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG9lEeKcAEca

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2024-07-05_ec84a992592d437b486e4256a900df0f_goldeneye
- Size
  
  197KB
- MD5
  
  ec84a992592d437b486e4256a900df0f
- SHA1
  
  81b116b3f10585b221f8be8e821f59c197c0f4d7
- SHA256
  
  76a836c7692328c1a5346cc053cc771e441a781f30b2ff1532afee6a139144ed
- SHA512
  
  fe3e34fda3bb2b247c09f5e589f17cafee3340cc4afa51696f995ae82b18394f1bcad2eccedf9a53c5a00d2c1b96814d82839e1d67f1b4bcb7edc03ee3f63d06
- SSDEEP
  
  3072:jEGh0ozl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG9lEeKcAEca
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2