eccc251dccb284bdae1e78a993281020fc2b4fc9406353fd2eb6a139b20ab738 | Triage

Sharing

General

Target

2024-10-17_61c7dc94f44ae2447ccf79cab005e242_goldeneye
Size

380KB
Sample

241017-n91s6szfkj
MD5

61c7dc94f44ae2447ccf79cab005e242
SHA1

26f0bdf91447f2549d454d3e06e650b149a6d150
SHA256

eccc251dccb284bdae1e78a993281020fc2b4fc9406353fd2eb6a139b20ab738
SHA512

37b60979abb7ee414511b05029d93c929db273e1341fbd4d7beb285b064add3ef446c5a746b800b3fe7dbe3df7acaac23bd6bf4aea5e941877352ed5cd980732
SSDEEP

3072:mEGh0oglPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGCl7Oe2MUVg3v2IneKcAEcARy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-17_61c7dc94f44ae2447ccf79cab005e242_goldeneye
- Size
  
  380KB
- MD5
  
  61c7dc94f44ae2447ccf79cab005e242
- SHA1
  
  26f0bdf91447f2549d454d3e06e650b149a6d150
- SHA256
  
  eccc251dccb284bdae1e78a993281020fc2b4fc9406353fd2eb6a139b20ab738
- SHA512
  
  37b60979abb7ee414511b05029d93c929db273e1341fbd4d7beb285b064add3ef446c5a746b800b3fe7dbe3df7acaac23bd6bf4aea5e941877352ed5cd980732
- SSDEEP
  
  3072:mEGh0oglPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGCl7Oe2MUVg3v2IneKcAEcARy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence