fc586aea901d331d1e9579ca921203e25ff3f3a4f560bc6357621362ba763920 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_50c2f92e85649b813ed0c8e7d6a689b7_goldeneye
Size

168KB
Sample

240906-ej5vrsvhna
MD5

50c2f92e85649b813ed0c8e7d6a689b7
SHA1

2cba6bf5c61d1a8fdd1925a77c415dec6cb2745d
SHA256

fc586aea901d331d1e9579ca921203e25ff3f3a4f560bc6357621362ba763920
SHA512

420c1e557229732e95252f30eefc20fa3598f40570ad4db3115eaa3d1d6bf6eeca54f1e4435c0e1a7228c3ac90893e0a102bc9fcdb1e88053dff1008370cab80
SSDEEP

1536:1EGh0orli5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0orliOPOe2MUVg3Ve+rX

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-06_50c2f92e85649b813ed0c8e7d6a689b7_goldeneye
- Size
  
  168KB
- MD5
  
  50c2f92e85649b813ed0c8e7d6a689b7
- SHA1
  
  2cba6bf5c61d1a8fdd1925a77c415dec6cb2745d
- SHA256
  
  fc586aea901d331d1e9579ca921203e25ff3f3a4f560bc6357621362ba763920
- SHA512
  
  420c1e557229732e95252f30eefc20fa3598f40570ad4db3115eaa3d1d6bf6eeca54f1e4435c0e1a7228c3ac90893e0a102bc9fcdb1e88053dff1008370cab80
- SSDEEP
  
  1536:1EGh0orli5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0orliOPOe2MUVg3Ve+rX
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence