7a064ad7879f03db4d7dae7720e0dc1857018028ee97e9dbdcaf09f79eed9c40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-09_27497019560b362c3b69b25b8abf9bf0_goldeneye
Size

180KB
Sample

240709-nzmtkavalg
MD5

27497019560b362c3b69b25b8abf9bf0
SHA1

ae19dd2167c68562f852201f3079702e6f4620f7
SHA256

7a064ad7879f03db4d7dae7720e0dc1857018028ee97e9dbdcaf09f79eed9c40
SHA512

2f016ac32746c0952c93db524316bb9165f47555b81ee4d3d444372bac5266ae1d72dd73685cfd613c3926bfbd6218ce4103441a56981ec20b50b6536fe47a3f
SSDEEP

3072:jEGh0o/lfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGZl5eKcAEc

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2024-07-09_27497019560b362c3b69b25b8abf9bf0_goldeneye
- Size
  
  180KB
- MD5
  
  27497019560b362c3b69b25b8abf9bf0
- SHA1
  
  ae19dd2167c68562f852201f3079702e6f4620f7
- SHA256
  
  7a064ad7879f03db4d7dae7720e0dc1857018028ee97e9dbdcaf09f79eed9c40
- SHA512
  
  2f016ac32746c0952c93db524316bb9165f47555b81ee4d3d444372bac5266ae1d72dd73685cfd613c3926bfbd6218ce4103441a56981ec20b50b6536fe47a3f
- SSDEEP
  
  3072:jEGh0o/lfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGZl5eKcAEc
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2