08f5acbab5ea7f6ca3d94ec0dec08788c099426c60968574dad54b7e8f817c41 | Triage

Sharing

General

Target

2024-08-12_11bcad7c984f0d68447b017b2ffa67e1_goldeneye
Size

344KB
Sample

240812-mhdnwsxamk
MD5

11bcad7c984f0d68447b017b2ffa67e1
SHA1

0da1708a903a2197d4e42bd8d2f6a4cc0bc3e100
SHA256

08f5acbab5ea7f6ca3d94ec0dec08788c099426c60968574dad54b7e8f817c41
SHA512

03b4808893562b52d9865912dd0c9392f285c9ccef9deeeb2c1c7ddee4ea09d15f102c905902190f7db9d90d22b6214b5ef54be4ddd3264616a990a66e71f280
SSDEEP

3072:mEGh0oclEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGylqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-12_11bcad7c984f0d68447b017b2ffa67e1_goldeneye
- Size
  
  344KB
- MD5
  
  11bcad7c984f0d68447b017b2ffa67e1
- SHA1
  
  0da1708a903a2197d4e42bd8d2f6a4cc0bc3e100
- SHA256
  
  08f5acbab5ea7f6ca3d94ec0dec08788c099426c60968574dad54b7e8f817c41
- SHA512
  
  03b4808893562b52d9865912dd0c9392f285c9ccef9deeeb2c1c7ddee4ea09d15f102c905902190f7db9d90d22b6214b5ef54be4ddd3264616a990a66e71f280
- SSDEEP
  
  3072:mEGh0oclEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGylqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence