e136a97baf9ad3d4d22f83a68be46cde11328cfae71545ec3442cf5aa9651532 | Triage

Sharing

General

Target

2024-10-05_3fe7e844677862fdbc835b56a729215f_goldeneye
Size

344KB
Sample

241005-lhka1asbla
MD5

3fe7e844677862fdbc835b56a729215f
SHA1

106490ec7af58b177d6938b296918c896988dbf0
SHA256

e136a97baf9ad3d4d22f83a68be46cde11328cfae71545ec3442cf5aa9651532
SHA512

5a6c75be62d5177b75a43c50b47ac3545a0e67253be5ced5bcd6b9ede88f80c43b6d1f7ca793bfb6843ef99faf924f566e050cdb04d8e2942ea77157a1cf038f
SSDEEP

3072:mEGh0oXlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGVlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-05_3fe7e844677862fdbc835b56a729215f_goldeneye
- Size
  
  344KB
- MD5
  
  3fe7e844677862fdbc835b56a729215f
- SHA1
  
  106490ec7af58b177d6938b296918c896988dbf0
- SHA256
  
  e136a97baf9ad3d4d22f83a68be46cde11328cfae71545ec3442cf5aa9651532
- SHA512
  
  5a6c75be62d5177b75a43c50b47ac3545a0e67253be5ced5bcd6b9ede88f80c43b6d1f7ca793bfb6843ef99faf924f566e050cdb04d8e2942ea77157a1cf038f
- SSDEEP
  
  3072:mEGh0oXlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGVlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence