ee465a400d87d1d46b81b49423270350c03b96c8d72d13e74b2f7ffa1aaf89dd | Triage

Sharing

General

Target

2024-09-19_846db54d44ae1090b6fc2ccaa3f8b383_goldeneye
Size

408KB
Sample

240919-ekaq1szejd
MD5

846db54d44ae1090b6fc2ccaa3f8b383
SHA1

357e52dbac0430a2fbb08a1874289575a8d27780
SHA256

ee465a400d87d1d46b81b49423270350c03b96c8d72d13e74b2f7ffa1aaf89dd
SHA512

db18b3740fa452db46bb5acc074d4682c0083a5c3e54ed199fd7b0ebd3116b0980f1f6c41daf67a20e20d3fadc99ddfb46b7d51dcd059cffa2b9b12f8ce025aa
SSDEEP

3072:CEGh0ovl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGhldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-19_846db54d44ae1090b6fc2ccaa3f8b383_goldeneye
- Size
  
  408KB
- MD5
  
  846db54d44ae1090b6fc2ccaa3f8b383
- SHA1
  
  357e52dbac0430a2fbb08a1874289575a8d27780
- SHA256
  
  ee465a400d87d1d46b81b49423270350c03b96c8d72d13e74b2f7ffa1aaf89dd
- SHA512
  
  db18b3740fa452db46bb5acc074d4682c0083a5c3e54ed199fd7b0ebd3116b0980f1f6c41daf67a20e20d3fadc99ddfb46b7d51dcd059cffa2b9b12f8ce025aa
- SSDEEP
  
  3072:CEGh0ovl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGhldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence