d5c7db1e5b60f4a0f4e44940747dc9b170dd0d95bbee5ac36d8cd2342569db12 | Triage

Sharing

General

Target

2024-08-12_9cefbdc410e63b47b4ba20fc8cd15e84_goldeneye
Size

192KB
Sample

240812-qbh7kswemd
MD5

9cefbdc410e63b47b4ba20fc8cd15e84
SHA1

9bcb6aefd92fb21e803f30eb160f8350e9cd553e
SHA256

d5c7db1e5b60f4a0f4e44940747dc9b170dd0d95bbee5ac36d8cd2342569db12
SHA512

655cfe7d95c4c635ca4623c5c43a63111b7b7e94cff3709b5c2c6527eefb49a88fa4b29e309f431030cebb675e9aae319b32c66567d6b65d1e11f4d59656cd69
SSDEEP

1536:1EGh0oDl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0oDl1OPOe2MUVg3Ve+rXfMUa

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-12_9cefbdc410e63b47b4ba20fc8cd15e84_goldeneye
- Size
  
  192KB
- MD5
  
  9cefbdc410e63b47b4ba20fc8cd15e84
- SHA1
  
  9bcb6aefd92fb21e803f30eb160f8350e9cd553e
- SHA256
  
  d5c7db1e5b60f4a0f4e44940747dc9b170dd0d95bbee5ac36d8cd2342569db12
- SHA512
  
  655cfe7d95c4c635ca4623c5c43a63111b7b7e94cff3709b5c2c6527eefb49a88fa4b29e309f431030cebb675e9aae319b32c66567d6b65d1e11f4d59656cd69
- SSDEEP
  
  1536:1EGh0oDl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0oDl1OPOe2MUVg3Ve+rXfMUa
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence