d85905b3b435782a9389e35f80cbeea9c2a574989c40ad254b7f22552a3adef0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-09_684f7891cf750ef3af5c130a20d488e4_goldeneye
Size

197KB
Sample

240909-ehexyszhqr
MD5

684f7891cf750ef3af5c130a20d488e4
SHA1

819b4b59d82d25c16e1a293cc3b4db59e3b2ccb9
SHA256

d85905b3b435782a9389e35f80cbeea9c2a574989c40ad254b7f22552a3adef0
SHA512

d5549dfb7c465f615064470784575da38d36d64d9daf5aeecce71b578d4375bd26c9321df04890164cd1bac70648a1f43a7f27a94207e90432bdc1409bddce3a
SSDEEP

3072:jEGh0oRl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGTlEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-09_684f7891cf750ef3af5c130a20d488e4_goldeneye
- Size
  
  197KB
- MD5
  
  684f7891cf750ef3af5c130a20d488e4
- SHA1
  
  819b4b59d82d25c16e1a293cc3b4db59e3b2ccb9
- SHA256
  
  d85905b3b435782a9389e35f80cbeea9c2a574989c40ad254b7f22552a3adef0
- SHA512
  
  d5549dfb7c465f615064470784575da38d36d64d9daf5aeecce71b578d4375bd26c9321df04890164cd1bac70648a1f43a7f27a94207e90432bdc1409bddce3a
- SSDEEP
  
  3072:jEGh0oRl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGTlEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence