0414ae293423816b7aa3f9d7679f6cee1fd1ff1a51c9aa06f872a80b9580d2ac | Triage

Sharing

General

Target

2024-08-23_62285842c230fc52e29c1977f83c1c51_goldeneye
Size

197KB
Sample

240823-mskj7asapk
MD5

62285842c230fc52e29c1977f83c1c51
SHA1

9345fe86911bfacae41f2c33dd1973dd3c1f7476
SHA256

0414ae293423816b7aa3f9d7679f6cee1fd1ff1a51c9aa06f872a80b9580d2ac
SHA512

87afca3fdba443ddc7e64270f3dbd6be3880f0fe157e14da4f8ab222c779545f1f6ba398ca77fbeaad013d70b460045ff31f378895783c7643d341f74d500c61
SSDEEP

3072:jEGh0o4l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGulEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-23_62285842c230fc52e29c1977f83c1c51_goldeneye
- Size
  
  197KB
- MD5
  
  62285842c230fc52e29c1977f83c1c51
- SHA1
  
  9345fe86911bfacae41f2c33dd1973dd3c1f7476
- SHA256
  
  0414ae293423816b7aa3f9d7679f6cee1fd1ff1a51c9aa06f872a80b9580d2ac
- SHA512
  
  87afca3fdba443ddc7e64270f3dbd6be3880f0fe157e14da4f8ab222c779545f1f6ba398ca77fbeaad013d70b460045ff31f378895783c7643d341f74d500c61
- SSDEEP
  
  3072:jEGh0o4l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGulEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence