29bf32dca63dd2cda1a7c682714c5a89e71ba32e088f6353c8f170f1b22701e2 | Triage

Sharing

General

Target

2024-09-09_c0db2e3360c456376bd99685fb559069_goldeneye
Size

344KB
Sample

240909-rbxkmstgrh
MD5

c0db2e3360c456376bd99685fb559069
SHA1

1d1bc3824d30e263815e79513c9c8440535d0bd8
SHA256

29bf32dca63dd2cda1a7c682714c5a89e71ba32e088f6353c8f170f1b22701e2
SHA512

6c0f50c7f07dd6a0b6c61434cf0cd2fde3816743f9cc9a4357643da1f7d4ee29b9b859fc2da30246ea12ca2193038b23335adbb7217e0b2a8ed7e91cf6e5ffa9
SSDEEP

3072:mEGh0orlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGJlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-09_c0db2e3360c456376bd99685fb559069_goldeneye
- Size
  
  344KB
- MD5
  
  c0db2e3360c456376bd99685fb559069
- SHA1
  
  1d1bc3824d30e263815e79513c9c8440535d0bd8
- SHA256
  
  29bf32dca63dd2cda1a7c682714c5a89e71ba32e088f6353c8f170f1b22701e2
- SHA512
  
  6c0f50c7f07dd6a0b6c61434cf0cd2fde3816743f9cc9a4357643da1f7d4ee29b9b859fc2da30246ea12ca2193038b23335adbb7217e0b2a8ed7e91cf6e5ffa9
- SSDEEP
  
  3072:mEGh0orlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGJlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence