9831989c706dda8a38658756e2cc79d7a0d6049b1476d9073f0ab1d7805b76e8 | Triage

Sharing

General

Target

2024-08-11_2dc0282bf677cb5fd6467a7a26b29f8f_goldeneye
Size

380KB
Sample

240811-hk9f5atbkf
MD5

2dc0282bf677cb5fd6467a7a26b29f8f
SHA1

851da886f6caa65fde4ee1d4043b3b37bb9aed5a
SHA256

9831989c706dda8a38658756e2cc79d7a0d6049b1476d9073f0ab1d7805b76e8
SHA512

ded17249dab0763ba79631e8234985fa1d20afe3d9895d11991b3b6a1c4a17555f6559c6e2aab3e6df408c6ceca637f5e5c370e27173780ec8ca044ed1681bef
SSDEEP

3072:mEGh0o2lPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGYl7Oe2MUVg3v2IneKcAEcARy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-11_2dc0282bf677cb5fd6467a7a26b29f8f_goldeneye
- Size
  
  380KB
- MD5
  
  2dc0282bf677cb5fd6467a7a26b29f8f
- SHA1
  
  851da886f6caa65fde4ee1d4043b3b37bb9aed5a
- SHA256
  
  9831989c706dda8a38658756e2cc79d7a0d6049b1476d9073f0ab1d7805b76e8
- SHA512
  
  ded17249dab0763ba79631e8234985fa1d20afe3d9895d11991b3b6a1c4a17555f6559c6e2aab3e6df408c6ceca637f5e5c370e27173780ec8ca044ed1681bef
- SSDEEP
  
  3072:mEGh0o2lPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGYl7Oe2MUVg3v2IneKcAEcARy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence