f1697c875231cf88b55cc1cd504ea8cbca317a23f055763cfc6a974f08a5de66 | Triage

Sharing

General

Target

2024-08-10_252c20d48c62782bba45e608caaaa84a_goldeneye
Size

197KB
Sample

240810-bjsnnaydmj
MD5

252c20d48c62782bba45e608caaaa84a
SHA1

a18fff8b46e465fed880b4905e37f525b38f95d8
SHA256

f1697c875231cf88b55cc1cd504ea8cbca317a23f055763cfc6a974f08a5de66
SHA512

96d2f9146190a49303a83dae6cad684def2efc8215a3f6c86015b849d1a824ac50eb66b3275fbbeb47a302f8f5a596aa570059126556566cacb912a059def2b3
SSDEEP

3072:jEGh0o4l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGOlEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-10_252c20d48c62782bba45e608caaaa84a_goldeneye
- Size
  
  197KB
- MD5
  
  252c20d48c62782bba45e608caaaa84a
- SHA1
  
  a18fff8b46e465fed880b4905e37f525b38f95d8
- SHA256
  
  f1697c875231cf88b55cc1cd504ea8cbca317a23f055763cfc6a974f08a5de66
- SHA512
  
  96d2f9146190a49303a83dae6cad684def2efc8215a3f6c86015b849d1a824ac50eb66b3275fbbeb47a302f8f5a596aa570059126556566cacb912a059def2b3
- SSDEEP
  
  3072:jEGh0o4l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGOlEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence