904ce9941f4c7de3769671b1d7d7b48d2dd1ce66363d374b7da6856f69e70f6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-25_83aaf3ea0010f785da1c22ac68b0f848_goldeneye
Size

284KB
Sample

240925-kzprdawgqq
MD5

83aaf3ea0010f785da1c22ac68b0f848
SHA1

5dafc6fe0b1fa8805f3fbad883a8a4ada748c4ce
SHA256

904ce9941f4c7de3769671b1d7d7b48d2dd1ce66363d374b7da6856f69e70f6c
SHA512

258cbd96435125714e1bf028e713a7923845f351868c0a7bcd4ca4c420e88eff46026b8887c2f8aa7f7a57927324642f1799dee10fb663d63ee3a5cc08260610
SSDEEP

3072:BEGh0oFlcOHOe2MUVg3bHrH/HqOYGqe+rcC4F+jHMUy:BEGblnOe2MUVg3vceKc+y

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-25_83aaf3ea0010f785da1c22ac68b0f848_goldeneye
- Size
  
  284KB
- MD5
  
  83aaf3ea0010f785da1c22ac68b0f848
- SHA1
  
  5dafc6fe0b1fa8805f3fbad883a8a4ada748c4ce
- SHA256
  
  904ce9941f4c7de3769671b1d7d7b48d2dd1ce66363d374b7da6856f69e70f6c
- SHA512
  
  258cbd96435125714e1bf028e713a7923845f351868c0a7bcd4ca4c420e88eff46026b8887c2f8aa7f7a57927324642f1799dee10fb663d63ee3a5cc08260610
- SSDEEP
  
  3072:BEGh0oFlcOHOe2MUVg3bHrH/HqOYGqe+rcC4F+jHMUy:BEGblnOe2MUVg3vceKc+y
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence