7b994158ba6c48e710614130ac9f07b58f9f127193e3850f29db85a605430508 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-07_8d1a0a9cca5f0e2cf58dce94b1899460_goldeneye
Size

372KB
Sample

240907-yjxc6stfqg
MD5

8d1a0a9cca5f0e2cf58dce94b1899460
SHA1

f49566ee3f66d73f8ef6242bad1a687489637155
SHA256

7b994158ba6c48e710614130ac9f07b58f9f127193e3850f29db85a605430508
SHA512

c0811646d9088d00bcde1571f4faf9fb109ff9ff505a043d0c7c5a82884da7bd07773f7721ad578b70d60f19c7ddd34ca9afe535b4fd06b68abe2828880de01c
SSDEEP

3072:CEGh0oDmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGQl/Oe2MUVg3vTeKcAEciTBqr3

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-07_8d1a0a9cca5f0e2cf58dce94b1899460_goldeneye
- Size
  
  372KB
- MD5
  
  8d1a0a9cca5f0e2cf58dce94b1899460
- SHA1
  
  f49566ee3f66d73f8ef6242bad1a687489637155
- SHA256
  
  7b994158ba6c48e710614130ac9f07b58f9f127193e3850f29db85a605430508
- SHA512
  
  c0811646d9088d00bcde1571f4faf9fb109ff9ff505a043d0c7c5a82884da7bd07773f7721ad578b70d60f19c7ddd34ca9afe535b4fd06b68abe2828880de01c
- SSDEEP
  
  3072:CEGh0oDmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGQl/Oe2MUVg3vTeKcAEciTBqr3
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence