65e61dfce3122e15e7b2eff2e20590419da45647e5fdb94a0a8f2ec3827e1138 | Triage

Sharing

General

Target

2024-09-07_2ba24fcd5880931b1aa18dcd0c337064_goldeneye
Size

197KB
Sample

240907-brtkxsxhng
MD5

2ba24fcd5880931b1aa18dcd0c337064
SHA1

9d9bceb90e0f02bafd6e56de8f9ff8f206806438
SHA256

65e61dfce3122e15e7b2eff2e20590419da45647e5fdb94a0a8f2ec3827e1138
SHA512

7849008624e20a9d0e01baedb36561294f8767bfdf3f492f8b0be7d72f6646d8317872e88716a2ba6b311c6959c448b94a09a954f4e13e32dc3ea2c1914184ff
SSDEEP

3072:jEGh0oil+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG4lEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-07_2ba24fcd5880931b1aa18dcd0c337064_goldeneye
- Size
  
  197KB
- MD5
  
  2ba24fcd5880931b1aa18dcd0c337064
- SHA1
  
  9d9bceb90e0f02bafd6e56de8f9ff8f206806438
- SHA256
  
  65e61dfce3122e15e7b2eff2e20590419da45647e5fdb94a0a8f2ec3827e1138
- SHA512
  
  7849008624e20a9d0e01baedb36561294f8767bfdf3f492f8b0be7d72f6646d8317872e88716a2ba6b311c6959c448b94a09a954f4e13e32dc3ea2c1914184ff
- SSDEEP
  
  3072:jEGh0oil+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG4lEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence