7087eed83d72b0d678831314675f5bc7cd72f1874929df4accd4e29cbf1a1f29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_16d8ca4f32204d91776cdd32187d67f4_goldeneye
Size

344KB
Sample

240913-t92ncsxhjh
MD5

16d8ca4f32204d91776cdd32187d67f4
SHA1

870ce37947988dab2320815a7d7bad024980ab3f
SHA256

7087eed83d72b0d678831314675f5bc7cd72f1874929df4accd4e29cbf1a1f29
SHA512

24802eafed6f4df0e4301c8fe681b4d649f25fd77aca1372501f841bc3d5eb7a715c9457b57cc89439fecf884d2300be781094974d248eb4efd83b47e05e8ae1
SSDEEP

3072:mEGh0ollEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGvlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-13_16d8ca4f32204d91776cdd32187d67f4_goldeneye
- Size
  
  344KB
- MD5
  
  16d8ca4f32204d91776cdd32187d67f4
- SHA1
  
  870ce37947988dab2320815a7d7bad024980ab3f
- SHA256
  
  7087eed83d72b0d678831314675f5bc7cd72f1874929df4accd4e29cbf1a1f29
- SHA512
  
  24802eafed6f4df0e4301c8fe681b4d649f25fd77aca1372501f841bc3d5eb7a715c9457b57cc89439fecf884d2300be781094974d248eb4efd83b47e05e8ae1
- SSDEEP
  
  3072:mEGh0ollEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGvlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence