b5ca48ed8395a8490392fb75014fdb62e572bc0bcb66a4ced32bb16b249a7787 | Triage

Sharing

General

Target

2024-09-03_d7b058fce1c0d92fdc51c51aedb134c0_goldeneye
Size

408KB
Sample

240903-e7p48aycpd
MD5

d7b058fce1c0d92fdc51c51aedb134c0
SHA1

5497249f86b497b5ec4a2b61307f1b1bad00d128
SHA256

b5ca48ed8395a8490392fb75014fdb62e572bc0bcb66a4ced32bb16b249a7787
SHA512

1965202f3b4071f1c4917556df0ff8ff97326c3a79c40fc96382d6aeb3dffafafb456ca040e5b6b1c87e4039595b1cf83afa55142ad3dd86107164aff360b854
SSDEEP

3072:CEGh0oel3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGEldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-03_d7b058fce1c0d92fdc51c51aedb134c0_goldeneye
- Size
  
  408KB
- MD5
  
  d7b058fce1c0d92fdc51c51aedb134c0
- SHA1
  
  5497249f86b497b5ec4a2b61307f1b1bad00d128
- SHA256
  
  b5ca48ed8395a8490392fb75014fdb62e572bc0bcb66a4ced32bb16b249a7787
- SHA512
  
  1965202f3b4071f1c4917556df0ff8ff97326c3a79c40fc96382d6aeb3dffafafb456ca040e5b6b1c87e4039595b1cf83afa55142ad3dd86107164aff360b854
- SSDEEP
  
  3072:CEGh0oel3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGEldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence