04679dc38317c1aa845939b0e01edb5a470420f60b1ff7e19c70fa9ef7f42414 | Triage

Sharing

General

Target

2024-09-14_72e1a8772327f3a0aaf180d39ad7c466_goldeneye
Size

408KB
Sample

240914-e399lawhkn
MD5

72e1a8772327f3a0aaf180d39ad7c466
SHA1

04dd8774877fcc60c9f6861255a02ebe58343516
SHA256

04679dc38317c1aa845939b0e01edb5a470420f60b1ff7e19c70fa9ef7f42414
SHA512

89dbed57f753d73b44e4f288b2c19341aa4677acab938d999fb6a4d378ee379a74ee81348f6cb74f8e9fe9bbeedf9d8bdf6da11854873031031fd957d1937592
SSDEEP

3072:CEGh0orl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGBldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-14_72e1a8772327f3a0aaf180d39ad7c466_goldeneye
- Size
  
  408KB
- MD5
  
  72e1a8772327f3a0aaf180d39ad7c466
- SHA1
  
  04dd8774877fcc60c9f6861255a02ebe58343516
- SHA256
  
  04679dc38317c1aa845939b0e01edb5a470420f60b1ff7e19c70fa9ef7f42414
- SHA512
  
  89dbed57f753d73b44e4f288b2c19341aa4677acab938d999fb6a4d378ee379a74ee81348f6cb74f8e9fe9bbeedf9d8bdf6da11854873031031fd957d1937592
- SSDEEP
  
  3072:CEGh0orl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGBldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence