0ee95dfe205f20a6baf277c2a2074453f04e6160f6831a73eaf17b6d9cbe4844 | Triage

Sharing

General

Target

2024-08-22_94a59ca41ad842cec2d7a2e03cf82557_goldeneye
Size

180KB
Sample

240822-gmjg2s1hnb
MD5

94a59ca41ad842cec2d7a2e03cf82557
SHA1

d98e22b91c98c6c57be8be340f77045d0a91382c
SHA256

0ee95dfe205f20a6baf277c2a2074453f04e6160f6831a73eaf17b6d9cbe4844
SHA512

0b49d7e2d1a153ece81a44f561690668f549f4e2ff09e56308fc64f0e9bc4db6d15089f2f4ecea2e175e449f2d2f385fd541ab586beb48441082761520ae48e2
SSDEEP

3072:jEGh0omlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGwl5eKcAEc

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-22_94a59ca41ad842cec2d7a2e03cf82557_goldeneye
- Size
  
  180KB
- MD5
  
  94a59ca41ad842cec2d7a2e03cf82557
- SHA1
  
  d98e22b91c98c6c57be8be340f77045d0a91382c
- SHA256
  
  0ee95dfe205f20a6baf277c2a2074453f04e6160f6831a73eaf17b6d9cbe4844
- SHA512
  
  0b49d7e2d1a153ece81a44f561690668f549f4e2ff09e56308fc64f0e9bc4db6d15089f2f4ecea2e175e449f2d2f385fd541ab586beb48441082761520ae48e2
- SSDEEP
  
  3072:jEGh0omlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGwl5eKcAEc
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence