79a46dc406a6198730d43292edd258cee9e00835e90b85faf71e4721cdbc034c | Triage

Sharing

General

Target

2024-10-14_4081feac30044953903b94af9949d079_goldeneye
Size

408KB
Sample

241014-lk1e1axglq
MD5

4081feac30044953903b94af9949d079
SHA1

2a7671b324766f29b2df215c91f116333463e792
SHA256

79a46dc406a6198730d43292edd258cee9e00835e90b85faf71e4721cdbc034c
SHA512

a2be746c548041879a8fee15d64344fe21178dc440a3ddc0e44150ed17009c417954742a85c93b5b5b94aba98fc06f0093d77a5b506824b4ee6f1f5c4906d827
SSDEEP

3072:CEGh0oSl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGwldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-14_4081feac30044953903b94af9949d079_goldeneye
- Size
  
  408KB
- MD5
  
  4081feac30044953903b94af9949d079
- SHA1
  
  2a7671b324766f29b2df215c91f116333463e792
- SHA256
  
  79a46dc406a6198730d43292edd258cee9e00835e90b85faf71e4721cdbc034c
- SHA512
  
  a2be746c548041879a8fee15d64344fe21178dc440a3ddc0e44150ed17009c417954742a85c93b5b5b94aba98fc06f0093d77a5b506824b4ee6f1f5c4906d827
- SSDEEP
  
  3072:CEGh0oSl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGwldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence