efea054452d3cf9c3958107ea41e6423a507515a9accf99ee0466f53286fb99e | Triage

Sharing

General

Target

2024-09-02_9285bc629e76c331fa4d6aef06f076ee_goldeneye
Size

372KB
Sample

240902-h7aajswdqg
MD5

9285bc629e76c331fa4d6aef06f076ee
SHA1

4649de3b69195980574b4f50d7402051c0841eff
SHA256

efea054452d3cf9c3958107ea41e6423a507515a9accf99ee0466f53286fb99e
SHA512

100abb7027d7aca4258ee84b39008760079462e5426f1012a8d49d46b5cec18a9eb4108ee78cd8d8ff3c1ff2f658fe812a68712ac51eeb9ba7f2cf1fa5486fd4
SSDEEP

3072:CEGh0ozmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGUl/Oe2MUVg3vTeKcAEciTBqr3

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-02_9285bc629e76c331fa4d6aef06f076ee_goldeneye
- Size
  
  372KB
- MD5
  
  9285bc629e76c331fa4d6aef06f076ee
- SHA1
  
  4649de3b69195980574b4f50d7402051c0841eff
- SHA256
  
  efea054452d3cf9c3958107ea41e6423a507515a9accf99ee0466f53286fb99e
- SHA512
  
  100abb7027d7aca4258ee84b39008760079462e5426f1012a8d49d46b5cec18a9eb4108ee78cd8d8ff3c1ff2f658fe812a68712ac51eeb9ba7f2cf1fa5486fd4
- SSDEEP
  
  3072:CEGh0ozmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGUl/Oe2MUVg3vTeKcAEciTBqr3
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence