4253c59a141646488a4f3f3e64dc6975d12d75da050d2e241c0dc6679e8204f9 | Triage

Sharing

General

Target

2024-09-19_9ef6e77912b5c16b893c496cde097353_goldeneye
Size

380KB
Sample

240919-el6j3szeqh
MD5

9ef6e77912b5c16b893c496cde097353
SHA1

b4e04264b53a6241e7516485644cdd9861e026b1
SHA256

4253c59a141646488a4f3f3e64dc6975d12d75da050d2e241c0dc6679e8204f9
SHA512

41d52c393ed9cdaabe98ac9d2fa65d31673b8064c7f1da72402a841ecf10af78e11f947cebef226afadcd77fc96c70d8f13bd545edfc13bd9ef14c1a100aaa06
SSDEEP

3072:mEGh0o0lPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGyl7Oe2MUVg3v2IneKcAEcARy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-19_9ef6e77912b5c16b893c496cde097353_goldeneye
- Size
  
  380KB
- MD5
  
  9ef6e77912b5c16b893c496cde097353
- SHA1
  
  b4e04264b53a6241e7516485644cdd9861e026b1
- SHA256
  
  4253c59a141646488a4f3f3e64dc6975d12d75da050d2e241c0dc6679e8204f9
- SHA512
  
  41d52c393ed9cdaabe98ac9d2fa65d31673b8064c7f1da72402a841ecf10af78e11f947cebef226afadcd77fc96c70d8f13bd545edfc13bd9ef14c1a100aaa06
- SSDEEP
  
  3072:mEGh0o0lPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGyl7Oe2MUVg3v2IneKcAEcARy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence