2ddf476168da433fee09bd5cba071f7e1dfa14b7bbb6c585eb3888b2b3c36e98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_a6bbc04be70e456017dac4bcda8bd50b_goldeneye
Size

180KB
Sample

240906-m84yrssgqj
MD5

a6bbc04be70e456017dac4bcda8bd50b
SHA1

7dbed2b890996d815cbb69a1a7606002d4583d54
SHA256

2ddf476168da433fee09bd5cba071f7e1dfa14b7bbb6c585eb3888b2b3c36e98
SHA512

555f457b6ab1aec697f0caed053b461c35b4ef546bd70d52e3018598fe93952b47346f6f98b5793358f04307b5239729da5b701b939f279bb3d84bc932080f56
SSDEEP

3072:jEGh0oElfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEG6l5eKcAEc

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-06_a6bbc04be70e456017dac4bcda8bd50b_goldeneye
- Size
  
  180KB
- MD5
  
  a6bbc04be70e456017dac4bcda8bd50b
- SHA1
  
  7dbed2b890996d815cbb69a1a7606002d4583d54
- SHA256
  
  2ddf476168da433fee09bd5cba071f7e1dfa14b7bbb6c585eb3888b2b3c36e98
- SHA512
  
  555f457b6ab1aec697f0caed053b461c35b4ef546bd70d52e3018598fe93952b47346f6f98b5793358f04307b5239729da5b701b939f279bb3d84bc932080f56
- SSDEEP
  
  3072:jEGh0oElfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEG6l5eKcAEc
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence