ee8aef9c0827580f22cce5bddd68c91daf0427ac9d071ea4addf13d217e36f04 | Triage

Sharing

General

Target

2024-09-08_85dbf2af3a820608c506266b00567e84_goldeneye
Size

197KB
Sample

240908-dc1f2a1dmn
MD5

85dbf2af3a820608c506266b00567e84
SHA1

4d531e9d3134939b23b3adfc3fee364a68ba17df
SHA256

ee8aef9c0827580f22cce5bddd68c91daf0427ac9d071ea4addf13d217e36f04
SHA512

c1ce7bf0cd65a738dad56fc36781f3b0ffaa9b3710707f013435bda91c8747743e6f457ac0d197012c8bf680ad6ef61968f1b433a7ddfc2f80e937b56c9536e6
SSDEEP

3072:jEGh0oIl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG2lEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-08_85dbf2af3a820608c506266b00567e84_goldeneye
- Size
  
  197KB
- MD5
  
  85dbf2af3a820608c506266b00567e84
- SHA1
  
  4d531e9d3134939b23b3adfc3fee364a68ba17df
- SHA256
  
  ee8aef9c0827580f22cce5bddd68c91daf0427ac9d071ea4addf13d217e36f04
- SHA512
  
  c1ce7bf0cd65a738dad56fc36781f3b0ffaa9b3710707f013435bda91c8747743e6f457ac0d197012c8bf680ad6ef61968f1b433a7ddfc2f80e937b56c9536e6
- SSDEEP
  
  3072:jEGh0oIl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEG2lEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence