ce662995c73ce93bc51847006a0b01079d663ed22cd5acf1034c227680bf469f | Triage

Sharing

General

Target

2024-09-04_c54e025d6d1e6f18c36db70cc340dea8_goldeneye
Size

380KB
Sample

240904-lhlh3aygkf
MD5

c54e025d6d1e6f18c36db70cc340dea8
SHA1

8c5880a6f1068ba93871c9c4f0a815a163d4ef5c
SHA256

ce662995c73ce93bc51847006a0b01079d663ed22cd5acf1034c227680bf469f
SHA512

42111f9cd97a19f870b6933b82f3eac0f902ef20c264493924b06251fad5d0fe2b82dfc4b65575d06a1a9d3897a48050022cfd23b11c1dcba0f8107c9a69d139
SSDEEP

3072:mEGh0o0lPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGal7Oe2MUVg3v2IneKcAEcARy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-04_c54e025d6d1e6f18c36db70cc340dea8_goldeneye
- Size
  
  380KB
- MD5
  
  c54e025d6d1e6f18c36db70cc340dea8
- SHA1
  
  8c5880a6f1068ba93871c9c4f0a815a163d4ef5c
- SHA256
  
  ce662995c73ce93bc51847006a0b01079d663ed22cd5acf1034c227680bf469f
- SHA512
  
  42111f9cd97a19f870b6933b82f3eac0f902ef20c264493924b06251fad5d0fe2b82dfc4b65575d06a1a9d3897a48050022cfd23b11c1dcba0f8107c9a69d139
- SSDEEP
  
  3072:mEGh0o0lPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGal7Oe2MUVg3v2IneKcAEcARy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence