9b329279665e9a3ad98c9a9560be17b2a13ab05a14d1e8486f19fdedb60a2dff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-05_d43c664aef2f855d360b3d8f2b7e87ea_goldeneye
Size

344KB
Sample

240905-mc6gqaybjm
MD5

d43c664aef2f855d360b3d8f2b7e87ea
SHA1

05056272029d8bc065a5413621a4cd8e4b7162b4
SHA256

9b329279665e9a3ad98c9a9560be17b2a13ab05a14d1e8486f19fdedb60a2dff
SHA512

5ca4801b81981fcce70e32a7ffd3da036be8bddaa4c6dbdc9d2a44ee4f99a47e31bba9a600e64b042823b3c6101193f4a000483e0123282955e99aa13576fcb1
SSDEEP

3072:mEGh0o1lEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGTlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-05_d43c664aef2f855d360b3d8f2b7e87ea_goldeneye
- Size
  
  344KB
- MD5
  
  d43c664aef2f855d360b3d8f2b7e87ea
- SHA1
  
  05056272029d8bc065a5413621a4cd8e4b7162b4
- SHA256
  
  9b329279665e9a3ad98c9a9560be17b2a13ab05a14d1e8486f19fdedb60a2dff
- SHA512
  
  5ca4801b81981fcce70e32a7ffd3da036be8bddaa4c6dbdc9d2a44ee4f99a47e31bba9a600e64b042823b3c6101193f4a000483e0123282955e99aa13576fcb1
- SSDEEP
  
  3072:mEGh0o1lEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGTlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence