4cc86034834d8a5135e9bb3db26101dd80995daa2d7905682ea5368f442605d7 | Triage

Sharing

General

Target

2024-10-06_39f47a0cdd0e0510196f4855cbd22ada_goldeneye
Size

372KB
Sample

241006-mwrgxathrb
MD5

39f47a0cdd0e0510196f4855cbd22ada
SHA1

2b3db4be9655783f5a22e8d1bcff37cf01adce52
SHA256

4cc86034834d8a5135e9bb3db26101dd80995daa2d7905682ea5368f442605d7
SHA512

108c28eac210c54dcd1f05f1a8063c2ea66faae97733a514e12ab197b3ba86ff20a04a9e018fc672f7acc8d75c70e7da9bc22b44918ca7f4d5b90eea3cb2561f
SSDEEP

3072:CEGh0onmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGkl/Oe2MUVg3vTeKcAEciTBqr3

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-06_39f47a0cdd0e0510196f4855cbd22ada_goldeneye
- Size
  
  372KB
- MD5
  
  39f47a0cdd0e0510196f4855cbd22ada
- SHA1
  
  2b3db4be9655783f5a22e8d1bcff37cf01adce52
- SHA256
  
  4cc86034834d8a5135e9bb3db26101dd80995daa2d7905682ea5368f442605d7
- SHA512
  
  108c28eac210c54dcd1f05f1a8063c2ea66faae97733a514e12ab197b3ba86ff20a04a9e018fc672f7acc8d75c70e7da9bc22b44918ca7f4d5b90eea3cb2561f
- SSDEEP
  
  3072:CEGh0onmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGkl/Oe2MUVg3vTeKcAEciTBqr3
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence