f1f9fa0f9dae295f771dab420e145ac024afb06b1797d519ebe47dbd52da5382 | Triage

Sharing

General

Target

2024-09-07_e445895b21c7f5c6c560c08ebbed34cb_goldeneye
Size

408KB
Sample

240907-nwcjesserm
MD5

e445895b21c7f5c6c560c08ebbed34cb
SHA1

e980f5e9054b050a233841b817b18a16d6892848
SHA256

f1f9fa0f9dae295f771dab420e145ac024afb06b1797d519ebe47dbd52da5382
SHA512

4b9cb6a2fb2bd459d6cd34a72bb86948c97f363e0432cd11b37125208dd86a3fc683aca31b92132b65f31c7be952a9703c9d0a167e25873571e2ac266540fd5f
SSDEEP

3072:CEGh0oCl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGkldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-07_e445895b21c7f5c6c560c08ebbed34cb_goldeneye
- Size
  
  408KB
- MD5
  
  e445895b21c7f5c6c560c08ebbed34cb
- SHA1
  
  e980f5e9054b050a233841b817b18a16d6892848
- SHA256
  
  f1f9fa0f9dae295f771dab420e145ac024afb06b1797d519ebe47dbd52da5382
- SHA512
  
  4b9cb6a2fb2bd459d6cd34a72bb86948c97f363e0432cd11b37125208dd86a3fc683aca31b92132b65f31c7be952a9703c9d0a167e25873571e2ac266540fd5f
- SSDEEP
  
  3072:CEGh0oCl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGkldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence