429ed1418f0d325f2e9e89a3b7c06175961cce1510873e4cbd3b390fdc0201d6 | Triage

Sharing

General

Target

2024-09-13_742ad037c317b6cab2b5464d56e65d54_goldeneye
Size

204KB
Sample

240913-gnaljayake
MD5

742ad037c317b6cab2b5464d56e65d54
SHA1

84260f31d8e42d61fe9eca6bf2a2c51bc7f31f9e
SHA256

429ed1418f0d325f2e9e89a3b7c06175961cce1510873e4cbd3b390fdc0201d6
SHA512

50d27e44f1e0210f3adedc8502a1aa67f5137c6b0f5947d70c66234ad52ab8eac43e80e31f0563b1bdf022fcf9f248851603654fca2c308f9f11b7e82dc0b96a
SSDEEP

1536:1EGh0o5l15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3Hgdo:1EGh0o5l1OPOe2MUVg3Ve+rXfMUy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-13_742ad037c317b6cab2b5464d56e65d54_goldeneye
- Size
  
  204KB
- MD5
  
  742ad037c317b6cab2b5464d56e65d54
- SHA1
  
  84260f31d8e42d61fe9eca6bf2a2c51bc7f31f9e
- SHA256
  
  429ed1418f0d325f2e9e89a3b7c06175961cce1510873e4cbd3b390fdc0201d6
- SHA512
  
  50d27e44f1e0210f3adedc8502a1aa67f5137c6b0f5947d70c66234ad52ab8eac43e80e31f0563b1bdf022fcf9f248851603654fca2c308f9f11b7e82dc0b96a
- SSDEEP
  
  1536:1EGh0o5l15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3Hgdo:1EGh0o5l1OPOe2MUVg3Ve+rXfMUy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence