f91926e9d22df15967196d46f771e1daa8291cf383b78834ac8a038a52a46a8d | Triage

Sharing

General

Target

2024-09-07_0f91ae284ebb25bf13f603a8f788fad5_goldeneye
Size

197KB
Sample

240907-hh1ffazgqe
MD5

0f91ae284ebb25bf13f603a8f788fad5
SHA1

556a50df22254beba895fb0e32d331f1a81b0b78
SHA256

f91926e9d22df15967196d46f771e1daa8291cf383b78834ac8a038a52a46a8d
SHA512

c6ee43b92f5549a9aaab4515f06847609cece5f8778215862e340a7bce2dbb3a137dbfb9e61fc4f3be2466f631b051d8d135a1bbab8bccdc1558b98d9bf2b30c
SSDEEP

3072:jEGh0o2l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGElEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-07_0f91ae284ebb25bf13f603a8f788fad5_goldeneye
- Size
  
  197KB
- MD5
  
  0f91ae284ebb25bf13f603a8f788fad5
- SHA1
  
  556a50df22254beba895fb0e32d331f1a81b0b78
- SHA256
  
  f91926e9d22df15967196d46f771e1daa8291cf383b78834ac8a038a52a46a8d
- SHA512
  
  c6ee43b92f5549a9aaab4515f06847609cece5f8778215862e340a7bce2dbb3a137dbfb9e61fc4f3be2466f631b051d8d135a1bbab8bccdc1558b98d9bf2b30c
- SSDEEP
  
  3072:jEGh0o2l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGElEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence