2a5392ca69b1c533ca878d509c63ff9e8c5b55d918d5f3edbf792c04d860eacb | Triage

Sharing

General

Target

2024-08-11_de850b0903e46951faf5cf7a9af27a5d_goldeneye
Size

408KB
Sample

240811-hvwm1szdkj
MD5

de850b0903e46951faf5cf7a9af27a5d
SHA1

fe58275c65003fee158e0280ac9f30bac2c375c1
SHA256

2a5392ca69b1c533ca878d509c63ff9e8c5b55d918d5f3edbf792c04d860eacb
SHA512

f772de0897caeb7ee3f00d1e32af9218d5634f99ea82417245bf191f4aad2ccc33ad635ffaa566f97208bc3e4092f9d4d08b8a1e56baf39811a9ec5bb4271467
SSDEEP

3072:CEGh0oll3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGTldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-11_de850b0903e46951faf5cf7a9af27a5d_goldeneye
- Size
  
  408KB
- MD5
  
  de850b0903e46951faf5cf7a9af27a5d
- SHA1
  
  fe58275c65003fee158e0280ac9f30bac2c375c1
- SHA256
  
  2a5392ca69b1c533ca878d509c63ff9e8c5b55d918d5f3edbf792c04d860eacb
- SHA512
  
  f772de0897caeb7ee3f00d1e32af9218d5634f99ea82417245bf191f4aad2ccc33ad635ffaa566f97208bc3e4092f9d4d08b8a1e56baf39811a9ec5bb4271467
- SSDEEP
  
  3072:CEGh0oll3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGTldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence