8bace0308914d4c1e240c4db42bac735eed8fd27271f51c6e0b1cb5021f00af4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_00b6ac56c17e606456b2a49f7c3b753c_goldeneye
Size

180KB
Sample

240907-mfcntazala
MD5

00b6ac56c17e606456b2a49f7c3b753c
SHA1

a4a26a80739f84df32f601ba4276c8617d4d9ff4
SHA256

8bace0308914d4c1e240c4db42bac735eed8fd27271f51c6e0b1cb5021f00af4
SHA512

4af7257416194745328ac7837c571c43bf52f5b9c5129c295680c2b81d82ea9215543bb74321b776446af10b64bddcf4d4ce65b5da3bbf4f5368658f7cd065bd
SSDEEP

3072:jEGh0oglfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGGl5eKcAEc

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-07_00b6ac56c17e606456b2a49f7c3b753c_goldeneye
- Size
  
  180KB
- MD5
  
  00b6ac56c17e606456b2a49f7c3b753c
- SHA1
  
  a4a26a80739f84df32f601ba4276c8617d4d9ff4
- SHA256
  
  8bace0308914d4c1e240c4db42bac735eed8fd27271f51c6e0b1cb5021f00af4
- SHA512
  
  4af7257416194745328ac7837c571c43bf52f5b9c5129c295680c2b81d82ea9215543bb74321b776446af10b64bddcf4d4ce65b5da3bbf4f5368658f7cd065bd
- SSDEEP
  
  3072:jEGh0oglfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGGl5eKcAEc
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence