1ad1fe8c64481077d8b2ab2a74de9f85436256b98547583151c20f20aed6f8a7 | Triage

Sharing

General

Target

2024-10-02_8b0767b0f63738314956be842b775337_goldeneye
Size

408KB
Sample

241002-kr2e7sxdrm
MD5

8b0767b0f63738314956be842b775337
SHA1

7bf35a975296251cebeb7fb2d488e741047fa406
SHA256

1ad1fe8c64481077d8b2ab2a74de9f85436256b98547583151c20f20aed6f8a7
SHA512

fbc546abed3eab2705221510bee9f44d312be9a90f44d5b263a4a26ce1f6b9232ad3b208a585f82e47afdbc1e7e7dd8452cf2bed07830a1503aba5422120057f
SSDEEP

3072:CEGh0oAl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEG6ldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-02_8b0767b0f63738314956be842b775337_goldeneye
- Size
  
  408KB
- MD5
  
  8b0767b0f63738314956be842b775337
- SHA1
  
  7bf35a975296251cebeb7fb2d488e741047fa406
- SHA256
  
  1ad1fe8c64481077d8b2ab2a74de9f85436256b98547583151c20f20aed6f8a7
- SHA512
  
  fbc546abed3eab2705221510bee9f44d312be9a90f44d5b263a4a26ce1f6b9232ad3b208a585f82e47afdbc1e7e7dd8452cf2bed07830a1503aba5422120057f
- SSDEEP
  
  3072:CEGh0oAl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEG6ldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence