affa9efdb1255f51d39bb11265b17d24e43988a3b85d23e644767d718a2f8304 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-10_103a84af04693d1ee4297b5c9951078a_goldeneye
Size

380KB
Sample

240810-ea9glavall
MD5

103a84af04693d1ee4297b5c9951078a
SHA1

0e0c42f67811d3844b47e4388b943e461124ecbf
SHA256

affa9efdb1255f51d39bb11265b17d24e43988a3b85d23e644767d718a2f8304
SHA512

d02e67ef14a455e8f26df6b99270fba5b69eed8c5a11a3b3c3cce42c3f7590c67fa3f4cc9c8babfbf1df95e9e607891d3c69a3656fd6c7b9b10a35bef7048598
SSDEEP

3072:mEGh0oYlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGOl7Oe2MUVg3v2IneKcAEcARy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-10_103a84af04693d1ee4297b5c9951078a_goldeneye
- Size
  
  380KB
- MD5
  
  103a84af04693d1ee4297b5c9951078a
- SHA1
  
  0e0c42f67811d3844b47e4388b943e461124ecbf
- SHA256
  
  affa9efdb1255f51d39bb11265b17d24e43988a3b85d23e644767d718a2f8304
- SHA512
  
  d02e67ef14a455e8f26df6b99270fba5b69eed8c5a11a3b3c3cce42c3f7590c67fa3f4cc9c8babfbf1df95e9e607891d3c69a3656fd6c7b9b10a35bef7048598
- SSDEEP
  
  3072:mEGh0oYlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGOl7Oe2MUVg3v2IneKcAEcARy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence