a2614bd90fc770ba92be6f91220c57a32e93a4956f9f4b43011ed3c31386e416 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-26_81cd8c791a194649e66f51ac2ea45ace_goldeneye
Size

197KB
Sample

240726-mn12dasbqm
MD5

81cd8c791a194649e66f51ac2ea45ace
SHA1

a5e9ba01764db8e7f0979426ca1f8132dd194697
SHA256

a2614bd90fc770ba92be6f91220c57a32e93a4956f9f4b43011ed3c31386e416
SHA512

936618a1fc360ea31385266c96efaf21a2fa4701af8b9b5996a5ee0520b3f66f1b097573fbb5f6fcc24212c6e477270ade33398e38a0f0f6ff19be8c46012bf3
SSDEEP

3072:jEGh0okl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG2lEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-07-26_81cd8c791a194649e66f51ac2ea45ace_goldeneye
- Size
  
  197KB
- MD5
  
  81cd8c791a194649e66f51ac2ea45ace
- SHA1
  
  a5e9ba01764db8e7f0979426ca1f8132dd194697
- SHA256
  
  a2614bd90fc770ba92be6f91220c57a32e93a4956f9f4b43011ed3c31386e416
- SHA512
  
  936618a1fc360ea31385266c96efaf21a2fa4701af8b9b5996a5ee0520b3f66f1b097573fbb5f6fcc24212c6e477270ade33398e38a0f0f6ff19be8c46012bf3
- SSDEEP
  
  3072:jEGh0okl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG2lEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence