7d2f74f2aa09dfec98089075fbbef5d5dbcd523445cf722c972548a832f7b126 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-27_432027b80210bfd2e3c1592c4af8a23b_goldeneye
Size

372KB
Sample

240927-me81mazhje
MD5

432027b80210bfd2e3c1592c4af8a23b
SHA1

cf0b0fed9156ca60ad12c7658e964cc9a1e95db2
SHA256

7d2f74f2aa09dfec98089075fbbef5d5dbcd523445cf722c972548a832f7b126
SHA512

57d42a0853828f5a6a5a2598edfa8e1b04010e8a7f7df49f0507caeb3e18a000d1791ff208ac8f9a1848582173a6b8e0740e8cc400b504da7965da3828be8702
SSDEEP

3072:CEGh0oBmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGGl/Oe2MUVg3vTeKcAEciTBqr3

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-27_432027b80210bfd2e3c1592c4af8a23b_goldeneye
- Size
  
  372KB
- MD5
  
  432027b80210bfd2e3c1592c4af8a23b
- SHA1
  
  cf0b0fed9156ca60ad12c7658e964cc9a1e95db2
- SHA256
  
  7d2f74f2aa09dfec98089075fbbef5d5dbcd523445cf722c972548a832f7b126
- SHA512
  
  57d42a0853828f5a6a5a2598edfa8e1b04010e8a7f7df49f0507caeb3e18a000d1791ff208ac8f9a1848582173a6b8e0740e8cc400b504da7965da3828be8702
- SSDEEP
  
  3072:CEGh0oBmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGGl/Oe2MUVg3vTeKcAEciTBqr3
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence