0175cdcf69c3c0e922683edd59d2db3b09d79e3c774a366f8c93c23ec10f61d2 | Triage

Sharing

General

Target

2024-08-10_6f427dc92b46c6e9a6f1c06e2474a96b_goldeneye
Size

197KB
Sample

240810-b4ankszemr
MD5

6f427dc92b46c6e9a6f1c06e2474a96b
SHA1

b9a42ee1f7a3228fb794383cf6e8b82968271a58
SHA256

0175cdcf69c3c0e922683edd59d2db3b09d79e3c774a366f8c93c23ec10f61d2
SHA512

81316010b98f72660eaff1ee9de930f5d93c970c5f91bca6c232ab0302da983a4608ef1dd659ee5784a61fbf5b8ab9794e9525e0dd24354285649f1b40bad41c
SSDEEP

3072:jEGh0oQl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGGlEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-10_6f427dc92b46c6e9a6f1c06e2474a96b_goldeneye
- Size
  
  197KB
- MD5
  
  6f427dc92b46c6e9a6f1c06e2474a96b
- SHA1
  
  b9a42ee1f7a3228fb794383cf6e8b82968271a58
- SHA256
  
  0175cdcf69c3c0e922683edd59d2db3b09d79e3c774a366f8c93c23ec10f61d2
- SHA512
  
  81316010b98f72660eaff1ee9de930f5d93c970c5f91bca6c232ab0302da983a4608ef1dd659ee5784a61fbf5b8ab9794e9525e0dd24354285649f1b40bad41c
- SSDEEP
  
  3072:jEGh0oQl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGGlEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence