97b801b14d88a7b1b6ae71b5156d0179871205bf4cf5c8870b44a841acb80fc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-29_80647fd5e5d709d5212b03e8c65f21b6_goldeneye
Size

408KB
Sample

240829-n26dpasbnj
MD5

80647fd5e5d709d5212b03e8c65f21b6
SHA1

15369521bfd1ae0605b08f0d628daf7f0d1fc4b9
SHA256

97b801b14d88a7b1b6ae71b5156d0179871205bf4cf5c8870b44a841acb80fc9
SHA512

e84d533301f7b1d45d21796cdc83b847fe4a3bbaa190563900031e3e4502f7adf956e7a7bd7cea34e224f4c9e7db2552a419d6d00d12f1ffa2de15b171823a31
SSDEEP

3072:CEGh0oql3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGEldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-08-29_80647fd5e5d709d5212b03e8c65f21b6_goldeneye
- Size
  
  408KB
- MD5
  
  80647fd5e5d709d5212b03e8c65f21b6
- SHA1
  
  15369521bfd1ae0605b08f0d628daf7f0d1fc4b9
- SHA256
  
  97b801b14d88a7b1b6ae71b5156d0179871205bf4cf5c8870b44a841acb80fc9
- SHA512
  
  e84d533301f7b1d45d21796cdc83b847fe4a3bbaa190563900031e3e4502f7adf956e7a7bd7cea34e224f4c9e7db2552a419d6d00d12f1ffa2de15b171823a31
- SSDEEP
  
  3072:CEGh0oql3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGEldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence