63bd316e8f0d2d7712bcce63df0839d06fe213b6bfbc0223111589616a2bbca0 | Triage

Sharing

General

Target

2024-09-13_70293947357ea290aadace87092958ed_goldeneye
Size

344KB
Sample

240913-gmxdxaxfkr
MD5

70293947357ea290aadace87092958ed
SHA1

75e815ce877662f251d679504f468e1c9bbbe1db
SHA256

63bd316e8f0d2d7712bcce63df0839d06fe213b6bfbc0223111589616a2bbca0
SHA512

443e041531d138ae9934a719b4aef30404b9cf4e463ebd28dc4b91e483d7887fbbefc9fc1b7df29b7313b12df3351e0b66327a88aab6e105b53a57c953e436d7
SSDEEP

3072:mEGh0oOlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGwlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-13_70293947357ea290aadace87092958ed_goldeneye
- Size
  
  344KB
- MD5
  
  70293947357ea290aadace87092958ed
- SHA1
  
  75e815ce877662f251d679504f468e1c9bbbe1db
- SHA256
  
  63bd316e8f0d2d7712bcce63df0839d06fe213b6bfbc0223111589616a2bbca0
- SHA512
  
  443e041531d138ae9934a719b4aef30404b9cf4e463ebd28dc4b91e483d7887fbbefc9fc1b7df29b7313b12df3351e0b66327a88aab6e105b53a57c953e436d7
- SSDEEP
  
  3072:mEGh0oOlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGwlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence