2645168462e76958d6fcf639fa0def8a57b40f99f756efee902e734e5ffc402e | Triage

Sharing

General

Target

2024-08-24_fea30277256688ebef83ab9eba939fa9_goldeneye
Size

192KB
Sample

240824-jk9ybszepa
MD5

fea30277256688ebef83ab9eba939fa9
SHA1

24ff0abd21fea01e5299f1311b652a836def94f6
SHA256

2645168462e76958d6fcf639fa0def8a57b40f99f756efee902e734e5ffc402e
SHA512

0a0e473471423d0b0f023b71428fd27848aa8eb78502356a19247e3d58254ab87adc236e194c6b317536a84f59902be35d7a7c481e6e7ee4140dde65e34f00da
SSDEEP

1536:1EGh0oOl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0oOl1OPOe2MUVg3Ve+rXfMUa

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-24_fea30277256688ebef83ab9eba939fa9_goldeneye
- Size
  
  192KB
- MD5
  
  fea30277256688ebef83ab9eba939fa9
- SHA1
  
  24ff0abd21fea01e5299f1311b652a836def94f6
- SHA256
  
  2645168462e76958d6fcf639fa0def8a57b40f99f756efee902e734e5ffc402e
- SHA512
  
  0a0e473471423d0b0f023b71428fd27848aa8eb78502356a19247e3d58254ab87adc236e194c6b317536a84f59902be35d7a7c481e6e7ee4140dde65e34f00da
- SSDEEP
  
  1536:1EGh0oOl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0oOl1OPOe2MUVg3Ve+rXfMUa
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence