79452ea75069f14b89efd4440facca77d54b7f284207b36c2149afa6f2d4fe6b | Triage

Sharing

General

Target

2024-09-30_a85a60579d91f34dbe932702e61d16e6_goldeneye
Size

372KB
Sample

240930-nqhhgsxdpc
MD5

a85a60579d91f34dbe932702e61d16e6
SHA1

31b36ba209a3412f00564f81840e6498ec14e5a1
SHA256

79452ea75069f14b89efd4440facca77d54b7f284207b36c2149afa6f2d4fe6b
SHA512

f0359115024c1a8ac31c47906791916b244402f43ec80f09b9aab41bd39498a1c02e668957f4eb9e7849d84517407d89760d77f6b5ae7b1266d649cc3a8c0788
SSDEEP

3072:CEGh0oclMOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBfM:CEGKlkOe2MUVg3vTeKcAEciTBqr3

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-30_a85a60579d91f34dbe932702e61d16e6_goldeneye
- Size
  
  372KB
- MD5
  
  a85a60579d91f34dbe932702e61d16e6
- SHA1
  
  31b36ba209a3412f00564f81840e6498ec14e5a1
- SHA256
  
  79452ea75069f14b89efd4440facca77d54b7f284207b36c2149afa6f2d4fe6b
- SHA512
  
  f0359115024c1a8ac31c47906791916b244402f43ec80f09b9aab41bd39498a1c02e668957f4eb9e7849d84517407d89760d77f6b5ae7b1266d649cc3a8c0788
- SSDEEP
  
  3072:CEGh0oclMOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBfM:CEGKlkOe2MUVg3vTeKcAEciTBqr3
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence