975f89f201ac9238e25f04d75c1a0de5d1d301eb02f6bc3cf06e23e67bacf61e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-05_27326c2b7a744505f6a807c371d9debd_goldeneye
Size

216KB
Sample

241005-1aczaatarm
MD5

27326c2b7a744505f6a807c371d9debd
SHA1

b067a62f3193e3a08de36cd3f8149a4f748ced3c
SHA256

975f89f201ac9238e25f04d75c1a0de5d1d301eb02f6bc3cf06e23e67bacf61e
SHA512

2958fd3c47946f549dd22c61d15d49702ad55ec6a8fbbc08b2422d96a9e9c5e5fcb352dcfcf7dbb21c6b93d9cab7649d556ace7441da099df8cd5a401cef7d5c
SSDEEP

3072:jEGh0okl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGmlEeKcAEcGy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-05_27326c2b7a744505f6a807c371d9debd_goldeneye
- Size
  
  216KB
- MD5
  
  27326c2b7a744505f6a807c371d9debd
- SHA1
  
  b067a62f3193e3a08de36cd3f8149a4f748ced3c
- SHA256
  
  975f89f201ac9238e25f04d75c1a0de5d1d301eb02f6bc3cf06e23e67bacf61e
- SHA512
  
  2958fd3c47946f549dd22c61d15d49702ad55ec6a8fbbc08b2422d96a9e9c5e5fcb352dcfcf7dbb21c6b93d9cab7649d556ace7441da099df8cd5a401cef7d5c
- SSDEEP
  
  3072:jEGh0okl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGmlEeKcAEcGy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence