4de37176cfdd8bf25ed5acd0e2815b282dd7f4c11f13d6e496785318d6978812 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-04_a09993a37abf9c5698be4966c7651399_goldeneye
Size

408KB
Sample

240904-jxchlawglm
MD5

a09993a37abf9c5698be4966c7651399
SHA1

725201d73f9bc9f59c3ad2999c1842c4dd695201
SHA256

4de37176cfdd8bf25ed5acd0e2815b282dd7f4c11f13d6e496785318d6978812
SHA512

91a9e6df4eacf8a08f066a3fa2ce82ee2a024768e443607690bd0d3c881665a8f0ddcc48f37d33bf2d175f5e0f27b732e5dfdb3b6d642fe1b44306321a95a1eb
SSDEEP

3072:CEGh0o9l3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGvldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-04_a09993a37abf9c5698be4966c7651399_goldeneye
- Size
  
  408KB
- MD5
  
  a09993a37abf9c5698be4966c7651399
- SHA1
  
  725201d73f9bc9f59c3ad2999c1842c4dd695201
- SHA256
  
  4de37176cfdd8bf25ed5acd0e2815b282dd7f4c11f13d6e496785318d6978812
- SHA512
  
  91a9e6df4eacf8a08f066a3fa2ce82ee2a024768e443607690bd0d3c881665a8f0ddcc48f37d33bf2d175f5e0f27b732e5dfdb3b6d642fe1b44306321a95a1eb
- SSDEEP
  
  3072:CEGh0o9l3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGvldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence