e60bf9bc086fa77b1493b5d4dadd9a02d85b8285133d1de4fa4d5461df52c4b8 | Triage

Sharing

General

Target

2024-08-24_d0baba85f956c352c70988e1893092d1_goldeneye
Size

344KB
Sample

240824-h52a9a1djn
MD5

d0baba85f956c352c70988e1893092d1
SHA1

5c037cf739fcdebee382465ed756336580b6b0a4
SHA256

e60bf9bc086fa77b1493b5d4dadd9a02d85b8285133d1de4fa4d5461df52c4b8
SHA512

905bb1dc4ee85f897d6ec2f0d091b3979237494d39a0f16cf29cc2e3dea2f85c5e75f5546d32159abe95a5c3b7567c465be9b67a44547b29a1e4b68b3a0deb64
SSDEEP

3072:mEGh0oPlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGtlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-24_d0baba85f956c352c70988e1893092d1_goldeneye
- Size
  
  344KB
- MD5
  
  d0baba85f956c352c70988e1893092d1
- SHA1
  
  5c037cf739fcdebee382465ed756336580b6b0a4
- SHA256
  
  e60bf9bc086fa77b1493b5d4dadd9a02d85b8285133d1de4fa4d5461df52c4b8
- SHA512
  
  905bb1dc4ee85f897d6ec2f0d091b3979237494d39a0f16cf29cc2e3dea2f85c5e75f5546d32159abe95a5c3b7567c465be9b67a44547b29a1e4b68b3a0deb64
- SSDEEP
  
  3072:mEGh0oPlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGtlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence