4141783c30033bdf6ac38eedc0cf4c66995abf6458d29b6d7a14b94ed9c1a546 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-15_5d568f89443242b85c69103dfc830f31_goldeneye
Size

216KB
Sample

241015-asr8tayamk
MD5

5d568f89443242b85c69103dfc830f31
SHA1

67b38cb4d33a012b9617cf09d53cc640e3887b12
SHA256

4141783c30033bdf6ac38eedc0cf4c66995abf6458d29b6d7a14b94ed9c1a546
SHA512

4ebee727d5e9105d5f2b3185ebcd174e041e1fdad671e0c7eeed439a0c7a8b156ba8785bea63bf35935a9cc29aa77aabca8416a9972b2e0fc3a3205a0fe75cdf
SSDEEP

3072:jEGh0o7l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGZlEeKcAEcGy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-15_5d568f89443242b85c69103dfc830f31_goldeneye
- Size
  
  216KB
- MD5
  
  5d568f89443242b85c69103dfc830f31
- SHA1
  
  67b38cb4d33a012b9617cf09d53cc640e3887b12
- SHA256
  
  4141783c30033bdf6ac38eedc0cf4c66995abf6458d29b6d7a14b94ed9c1a546
- SHA512
  
  4ebee727d5e9105d5f2b3185ebcd174e041e1fdad671e0c7eeed439a0c7a8b156ba8785bea63bf35935a9cc29aa77aabca8416a9972b2e0fc3a3205a0fe75cdf
- SSDEEP
  
  3072:jEGh0o7l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMUy:jEGZlEeKcAEcGy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence