9f6179230c40ed5a80e40706152d6776d004affc564e77895ff40e2eabc13d5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-28_92bbce83df24a8a102ad32f356ae33cc_goldeneye
Size

408KB
Sample

240928-jta6csxcrc
MD5

92bbce83df24a8a102ad32f356ae33cc
SHA1

80b388f31861fdfd78ecc631ceacc64fd05fd510
SHA256

9f6179230c40ed5a80e40706152d6776d004affc564e77895ff40e2eabc13d5b
SHA512

811e24940032c2ee1602c79f55ee471952896e4029ae02b1b28d5935727c9cb57fe5f948aa92ea40a32e46f466e16dd7c981485ec9f060b2e64d95748f0d7ebf
SSDEEP

3072:CEGh0oRl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEG7ldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-28_92bbce83df24a8a102ad32f356ae33cc_goldeneye
- Size
  
  408KB
- MD5
  
  92bbce83df24a8a102ad32f356ae33cc
- SHA1
  
  80b388f31861fdfd78ecc631ceacc64fd05fd510
- SHA256
  
  9f6179230c40ed5a80e40706152d6776d004affc564e77895ff40e2eabc13d5b
- SHA512
  
  811e24940032c2ee1602c79f55ee471952896e4029ae02b1b28d5935727c9cb57fe5f948aa92ea40a32e46f466e16dd7c981485ec9f060b2e64d95748f0d7ebf
- SSDEEP
  
  3072:CEGh0oRl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEG7ldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence