bf7d2d284d9ebf610ebf7d0a6f272d4b45363879fa8c3d389f1c83a92dd39e9b | Triage

Sharing

General

Target

2024-09-19_26710ad29b033a892105843e1ab978d3_goldeneye
Size

197KB
Sample

240919-ed42aazbme
MD5

26710ad29b033a892105843e1ab978d3
SHA1

53699734f162e402715a64a787a34b73c681d850
SHA256

bf7d2d284d9ebf610ebf7d0a6f272d4b45363879fa8c3d389f1c83a92dd39e9b
SHA512

64d2c1a06013f079efca0293ef2597d6e8d0b5c55906cf095eb98c00413fb2e5c969b75aca1e517808ddd6980fcf837e5117fb154fc7670149d1842a765c7593
SSDEEP

3072:jEGh0osl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGClEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-19_26710ad29b033a892105843e1ab978d3_goldeneye
- Size
  
  197KB
- MD5
  
  26710ad29b033a892105843e1ab978d3
- SHA1
  
  53699734f162e402715a64a787a34b73c681d850
- SHA256
  
  bf7d2d284d9ebf610ebf7d0a6f272d4b45363879fa8c3d389f1c83a92dd39e9b
- SHA512
  
  64d2c1a06013f079efca0293ef2597d6e8d0b5c55906cf095eb98c00413fb2e5c969b75aca1e517808ddd6980fcf837e5117fb154fc7670149d1842a765c7593
- SSDEEP
  
  3072:jEGh0osl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGClEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence