dd6e33e59e3016e8a959b0d0a1487baf236d9de2863cd25b9e78bc57628ce311 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-29_8d2fa134e720e5d5453256a5b5f996b0_goldeneye
Size

180KB
Sample

240829-kvdhjsvfnr
MD5

8d2fa134e720e5d5453256a5b5f996b0
SHA1

e64ecf00ec8c1552f968ba42781272249ebd91ab
SHA256

dd6e33e59e3016e8a959b0d0a1487baf236d9de2863cd25b9e78bc57628ce311
SHA512

5e318b538ca793f5233f866dec60098dd2429fb0232ec2aa0452d3d56531e8b9663f9097b90534761eba94b8c7c9444d6bfa9964946a1a2f12cb00001b3e72c6
SSDEEP

3072:jEGh0oelfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEG4l5eKcAEc

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-29_8d2fa134e720e5d5453256a5b5f996b0_goldeneye
- Size
  
  180KB
- MD5
  
  8d2fa134e720e5d5453256a5b5f996b0
- SHA1
  
  e64ecf00ec8c1552f968ba42781272249ebd91ab
- SHA256
  
  dd6e33e59e3016e8a959b0d0a1487baf236d9de2863cd25b9e78bc57628ce311
- SHA512
  
  5e318b538ca793f5233f866dec60098dd2429fb0232ec2aa0452d3d56531e8b9663f9097b90534761eba94b8c7c9444d6bfa9964946a1a2f12cb00001b3e72c6
- SSDEEP
  
  3072:jEGh0oelfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEG4l5eKcAEc
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence