ec6f662fe878a756c1acbfb24ccffb64813100da25ac08d052441135a26c6da5 | Triage

Sharing

General

Target

2024-08-07_3c39eed2d3ff3f55ed1c0ad0e434b5d4_goldeneye
Size

216KB
Sample

240807-eer34szgpj
MD5

3c39eed2d3ff3f55ed1c0ad0e434b5d4
SHA1

661e25b519026342b34027b92d57bbccf2f87fb5
SHA256

ec6f662fe878a756c1acbfb24ccffb64813100da25ac08d052441135a26c6da5
SHA512

e454155e1bca8f8171a484075850e976e1083436a51db65acd83d3668edbb6350f9b53f6caef8cf34acc1db3441c2f71a19cafbad53329a6524b8c6db4b7d8f1
SSDEEP

3072:jEGh0oVl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGjlEeKcAEcGy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-07_3c39eed2d3ff3f55ed1c0ad0e434b5d4_goldeneye
- Size
  
  216KB
- MD5
  
  3c39eed2d3ff3f55ed1c0ad0e434b5d4
- SHA1
  
  661e25b519026342b34027b92d57bbccf2f87fb5
- SHA256
  
  ec6f662fe878a756c1acbfb24ccffb64813100da25ac08d052441135a26c6da5
- SHA512
  
  e454155e1bca8f8171a484075850e976e1083436a51db65acd83d3668edbb6350f9b53f6caef8cf34acc1db3441c2f71a19cafbad53329a6524b8c6db4b7d8f1
- SSDEEP
  
  3072:jEGh0oVl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGjlEeKcAEcGy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence