c43770a144a0c4e32f3d838f6af728484d28c37026c0e0f9337545eb169859d7 | Triage

Sharing

General

Target

2024-07-27_52cc12ba83b2d02580ea528d9ad04c8c_goldeneye
Size

408KB
Sample

240727-eflbyswarj
MD5

52cc12ba83b2d02580ea528d9ad04c8c
SHA1

3e78f7bef7ff9748e5e1dd4532d0c2e811e18ce5
SHA256

c43770a144a0c4e32f3d838f6af728484d28c37026c0e0f9337545eb169859d7
SHA512

ade1fc4dfa0a77fba375863d67486d3400a3859ad7c74a8ce272db17b49bfb26b9373b81828be8b8b20624d81df65c6367e0940f6fa953d1928f353549f2ed68
SSDEEP

3072:CEGh0oIl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGyldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-07-27_52cc12ba83b2d02580ea528d9ad04c8c_goldeneye
- Size
  
  408KB
- MD5
  
  52cc12ba83b2d02580ea528d9ad04c8c
- SHA1
  
  3e78f7bef7ff9748e5e1dd4532d0c2e811e18ce5
- SHA256
  
  c43770a144a0c4e32f3d838f6af728484d28c37026c0e0f9337545eb169859d7
- SHA512
  
  ade1fc4dfa0a77fba375863d67486d3400a3859ad7c74a8ce272db17b49bfb26b9373b81828be8b8b20624d81df65c6367e0940f6fa953d1928f353549f2ed68
- SSDEEP
  
  3072:CEGh0oIl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGyldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence