ee5984b39bab28ef8cf12dfc38380998dc6ce115e5401a8788e8dcc24644acab | Triage

Sharing

General

Target

2024-10-31_8ed7a6776d26020392895ac0bd7d02a9_goldeneye
Size

380KB
Sample

241031-cd6trsvqgt
MD5

8ed7a6776d26020392895ac0bd7d02a9
SHA1

b45612cff48847fa870f3196e496f9bdbdea3f38
SHA256

ee5984b39bab28ef8cf12dfc38380998dc6ce115e5401a8788e8dcc24644acab
SHA512

06a6e7b11659226091edbe37eac464d0154459604feaa2e7c12beda5716278fb5d4c0361f61f7bb4a1b41fc753eccf8572e3346f43ef41ae88ba2c872bfbdff5
SSDEEP

3072:mEGh0ohlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGfl7Oe2MUVg3v2IneKcAEcARy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-10-31_8ed7a6776d26020392895ac0bd7d02a9_goldeneye
- Size
  
  380KB
- MD5
  
  8ed7a6776d26020392895ac0bd7d02a9
- SHA1
  
  b45612cff48847fa870f3196e496f9bdbdea3f38
- SHA256
  
  ee5984b39bab28ef8cf12dfc38380998dc6ce115e5401a8788e8dcc24644acab
- SHA512
  
  06a6e7b11659226091edbe37eac464d0154459604feaa2e7c12beda5716278fb5d4c0361f61f7bb4a1b41fc753eccf8572e3346f43ef41ae88ba2c872bfbdff5
- SSDEEP
  
  3072:mEGh0ohlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEGfl7Oe2MUVg3v2IneKcAEcARy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence