3bfd6941efabab7b47b8e5f8da6f1568f95f5b5bc148f075683808ecb41327bb | Triage

Sharing

General

Target

2024-11-21_66c1cdd05991763f387d74554615fc1f_goldeneye
Size

344KB
Sample

241121-epzwpszapj
MD5

66c1cdd05991763f387d74554615fc1f
SHA1

e31c6ca1d718f847b5202be42e8997afe62c3a57
SHA256

3bfd6941efabab7b47b8e5f8da6f1568f95f5b5bc148f075683808ecb41327bb
SHA512

7aa5c146bc55e6fbf8bccf5392da68cb08e8a31d8035df265855b64d256f342f042af6b5e0b24c6ee33734a9eda58b280834b16e68b53c69f83c2dbcc19aa25c
SSDEEP

3072:mEGh0oHlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGVlqOe2MUVg3v2IneKcAEcA

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-11-21_66c1cdd05991763f387d74554615fc1f_goldeneye
- Size
  
  344KB
- MD5
  
  66c1cdd05991763f387d74554615fc1f
- SHA1
  
  e31c6ca1d718f847b5202be42e8997afe62c3a57
- SHA256
  
  3bfd6941efabab7b47b8e5f8da6f1568f95f5b5bc148f075683808ecb41327bb
- SHA512
  
  7aa5c146bc55e6fbf8bccf5392da68cb08e8a31d8035df265855b64d256f342f042af6b5e0b24c6ee33734a9eda58b280834b16e68b53c69f83c2dbcc19aa25c
- SSDEEP
  
  3072:mEGh0oHlEOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGL:mEGVlqOe2MUVg3v2IneKcAEcA
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence