a99a2c428163aad4bdc669bc163b617930949ac4add6d8ed42982822b6bd6835 | Triage

Sharing

General

Target

2024-09-30_850c9dfe5baa234043e7c2a3251c5490_goldeneye
Size

180KB
Sample

240930-llgpaaseph
MD5

850c9dfe5baa234043e7c2a3251c5490
SHA1

7c9c05e2a03efcecbe6ad6fc8a3a1432d1493297
SHA256

a99a2c428163aad4bdc669bc163b617930949ac4add6d8ed42982822b6bd6835
SHA512

c9381d49e7a13e6ca76a24ac83dc3ddc0c231264c877136254e1b61f796075377d3a14d2b45a59c4e55c73e9ef178eef37b767d89597496231743b92f646fd3c
SSDEEP

3072:jEGh0otlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGzl5eKcAEc

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-30_850c9dfe5baa234043e7c2a3251c5490_goldeneye
- Size
  
  180KB
- MD5
  
  850c9dfe5baa234043e7c2a3251c5490
- SHA1
  
  7c9c05e2a03efcecbe6ad6fc8a3a1432d1493297
- SHA256
  
  a99a2c428163aad4bdc669bc163b617930949ac4add6d8ed42982822b6bd6835
- SHA512
  
  c9381d49e7a13e6ca76a24ac83dc3ddc0c231264c877136254e1b61f796075377d3a14d2b45a59c4e55c73e9ef178eef37b767d89597496231743b92f646fd3c
- SSDEEP
  
  3072:jEGh0otlfOso7ie+rcC4F0fJGRIS8Rfd7eQEcGcr:jEGzl5eKcAEc
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence