b2abf6f8e5017baf0ed915c5da53a52229731f3dd2c68d14d9f0a50014893aee | Triage

Sharing

General

Target

2024-07-27_f5f18fd0f613354ebb56e3a2ea6ae164_goldeneye
Size

204KB
Sample

240727-erg4nszbmc
MD5

f5f18fd0f613354ebb56e3a2ea6ae164
SHA1

453fdfcfbde2b059c3395635ffe5753ad2912046
SHA256

b2abf6f8e5017baf0ed915c5da53a52229731f3dd2c68d14d9f0a50014893aee
SHA512

d7149219dee1c19019aa7f7064616a74acdb79d038cc9dd14fbb3259bb61876c6c6f8010459a5c3fe8e29f49ebb38b9ed61edb05f7493b9870aa0e99a87be211
SSDEEP

1536:1EGh0o61l15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3Hgdo:1EGh0oSl1OPOe2MUVg3Ve+rXfMUy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-07-27_f5f18fd0f613354ebb56e3a2ea6ae164_goldeneye
- Size
  
  204KB
- MD5
  
  f5f18fd0f613354ebb56e3a2ea6ae164
- SHA1
  
  453fdfcfbde2b059c3395635ffe5753ad2912046
- SHA256
  
  b2abf6f8e5017baf0ed915c5da53a52229731f3dd2c68d14d9f0a50014893aee
- SHA512
  
  d7149219dee1c19019aa7f7064616a74acdb79d038cc9dd14fbb3259bb61876c6c6f8010459a5c3fe8e29f49ebb38b9ed61edb05f7493b9870aa0e99a87be211
- SSDEEP
  
  1536:1EGh0o61l15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3Hgdo:1EGh0oSl1OPOe2MUVg3Ve+rXfMUy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence