26135ce5c7dfa97d820d476854ec6e22be856e0b3586e79e3c6167d8825c7091 | Triage

Sharing

General

Target

2024-09-19_885ef39fd534e498918d4b29ea5f2d1e_goldeneye
Size

344KB
Sample

240919-ekn9eazekg
MD5

885ef39fd534e498918d4b29ea5f2d1e
SHA1

4d8d8de64e2292f9f0a126554ec97243591442d1
SHA256

26135ce5c7dfa97d820d476854ec6e22be856e0b3586e79e3c6167d8825c7091
SHA512

68518b3b630b969a3a18e88d4afc48ddf0579ec7ee8e55f024ec79c902df6a4271be4cff462d29fbcd83051b4626834e47cc7fe58ad198bb8c4c5b8b584c5a64
SSDEEP

3072:mEGh0oFlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGDlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-19_885ef39fd534e498918d4b29ea5f2d1e_goldeneye
- Size
  
  344KB
- MD5
  
  885ef39fd534e498918d4b29ea5f2d1e
- SHA1
  
  4d8d8de64e2292f9f0a126554ec97243591442d1
- SHA256
  
  26135ce5c7dfa97d820d476854ec6e22be856e0b3586e79e3c6167d8825c7091
- SHA512
  
  68518b3b630b969a3a18e88d4afc48ddf0579ec7ee8e55f024ec79c902df6a4271be4cff462d29fbcd83051b4626834e47cc7fe58ad198bb8c4c5b8b584c5a64
- SSDEEP
  
  3072:mEGh0oFlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGDlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence