4f425cfd5e341e8cfbf335ea29eab527c9aabb809a8c804e44f4a187bdcf437c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-23_64f9489be9057a966d6f63d67f0aa145_goldeneye
Size

192KB
Sample

240723-ssexlawhnp
MD5

64f9489be9057a966d6f63d67f0aa145
SHA1

7c208e0e3746ad60128c2c70afc02123f3c6354c
SHA256

4f425cfd5e341e8cfbf335ea29eab527c9aabb809a8c804e44f4a187bdcf437c
SHA512

132f1a0a2c9f12410f6ac1b9f3992a7d2d8b1838dd7e16a8ce024675799138d554392eeffaaaf2e757a756f724d4362bf8eab7fc1e8a8292d3f5f0b0a07ef1de
SSDEEP

1536:1EGh0obl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0obl1OPOe2MUVg3Ve+rXfMUa

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-07-23_64f9489be9057a966d6f63d67f0aa145_goldeneye
- Size
  
  192KB
- MD5
  
  64f9489be9057a966d6f63d67f0aa145
- SHA1
  
  7c208e0e3746ad60128c2c70afc02123f3c6354c
- SHA256
  
  4f425cfd5e341e8cfbf335ea29eab527c9aabb809a8c804e44f4a187bdcf437c
- SHA512
  
  132f1a0a2c9f12410f6ac1b9f3992a7d2d8b1838dd7e16a8ce024675799138d554392eeffaaaf2e757a756f724d4362bf8eab7fc1e8a8292d3f5f0b0a07ef1de
- SSDEEP
  
  1536:1EGh0obl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0obl1OPOe2MUVg3Ve+rXfMUa
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence