1403321fbb0d3c3f07b4ff11071a7a1cf41035a9685cef5471dcaedabea98000 | Triage

Sharing

General

Target

2024-10-18_f53205ca20155bd2e418cfb8c168ebf2_goldeneye
Size

168KB
Sample

241018-l12m1atbrp
MD5

f53205ca20155bd2e418cfb8c168ebf2
SHA1

d6a94c1e1913b26a4cd6d24d50c2d2b261ac3730
SHA256

1403321fbb0d3c3f07b4ff11071a7a1cf41035a9685cef5471dcaedabea98000
SHA512

d571f9af1afeffc775e13128023e79a16609d7a85dbc3f8d652624e532aab97a6292187b55fa5825f06bdaf98b9c9582c742a121bc8f0fea4abe788cfcf50aa1
SSDEEP

1536:1EGh0oZlq5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0oZlqOPOe2MUVg3Ve+rX

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-18_f53205ca20155bd2e418cfb8c168ebf2_goldeneye
- Size
  
  168KB
- MD5
  
  f53205ca20155bd2e418cfb8c168ebf2
- SHA1
  
  d6a94c1e1913b26a4cd6d24d50c2d2b261ac3730
- SHA256
  
  1403321fbb0d3c3f07b4ff11071a7a1cf41035a9685cef5471dcaedabea98000
- SHA512
  
  d571f9af1afeffc775e13128023e79a16609d7a85dbc3f8d652624e532aab97a6292187b55fa5825f06bdaf98b9c9582c742a121bc8f0fea4abe788cfcf50aa1
- SSDEEP
  
  1536:1EGh0oZlq5IRVhNJ5Qef7BudMeNzVg3Ve+rrS2:1EGh0oZlqOPOe2MUVg3Ve+rX
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence