bddea9b8cd8e7b1b4e317886794ec0bb0f778c808186226ef8f0edaa96166b40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-14_7e2be489fc3255ae911062093bb83a90_goldeneye
Size

408KB
Sample

241014-y5vfpsvbne
MD5

7e2be489fc3255ae911062093bb83a90
SHA1

3d67718bec476f28f5fb0cda7c2efab37d74475e
SHA256

bddea9b8cd8e7b1b4e317886794ec0bb0f778c808186226ef8f0edaa96166b40
SHA512

aa6a43ffeecfcf45020c987fad3017d2f0c8ff85e9f5b49eb172b084d396ae84126a2310bbb235e95d5b325253217beaafcef43544ad8832c3c460d5d5edd3e9
SSDEEP

3072:CEGh0oAl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGqldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-14_7e2be489fc3255ae911062093bb83a90_goldeneye
- Size
  
  408KB
- MD5
  
  7e2be489fc3255ae911062093bb83a90
- SHA1
  
  3d67718bec476f28f5fb0cda7c2efab37d74475e
- SHA256
  
  bddea9b8cd8e7b1b4e317886794ec0bb0f778c808186226ef8f0edaa96166b40
- SHA512
  
  aa6a43ffeecfcf45020c987fad3017d2f0c8ff85e9f5b49eb172b084d396ae84126a2310bbb235e95d5b325253217beaafcef43544ad8832c3c460d5d5edd3e9
- SSDEEP
  
  3072:CEGh0oAl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGqldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence