36715e9daea422ea0480c84d66839cdd2f98195e37e6f5d074ab921526354958 | Triage

Sharing

General

Target

2024-09-07_6659b4d686860a19e97f64334cfdc947_goldeneye
Size

197KB
Sample

240907-hlzy3szhjm
MD5

6659b4d686860a19e97f64334cfdc947
SHA1

8a4dd78e983f60d4b191501af52ff39c9e6c0912
SHA256

36715e9daea422ea0480c84d66839cdd2f98195e37e6f5d074ab921526354958
SHA512

3dfadcfdab409cd1440d2cb8282ea28b064d197b9c3825e12b253867850580719e8aad3d26975f2807badf6fafccfa008562bba7c53f057437ad721597f21014
SSDEEP

3072:jEGh0oKl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG0lEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-07_6659b4d686860a19e97f64334cfdc947_goldeneye
- Size
  
  197KB
- MD5
  
  6659b4d686860a19e97f64334cfdc947
- SHA1
  
  8a4dd78e983f60d4b191501af52ff39c9e6c0912
- SHA256
  
  36715e9daea422ea0480c84d66839cdd2f98195e37e6f5d074ab921526354958
- SHA512
  
  3dfadcfdab409cd1440d2cb8282ea28b064d197b9c3825e12b253867850580719e8aad3d26975f2807badf6fafccfa008562bba7c53f057437ad721597f21014
- SSDEEP
  
  3072:jEGh0oKl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG0lEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence