b75332112017456f64700ddf97c5b34c68e884d03138b4b41ea58b38f8f7ebe1 | Triage

Sharing

General

Target

2025-01-11_34277795c25cc0bb11fef8d45405e2e2_goldeneye
Size

197KB
Sample

250111-hf4ebasjaq
MD5

34277795c25cc0bb11fef8d45405e2e2
SHA1

4efdb571f1378aad240857e2d1810ec7d3117e8c
SHA256

b75332112017456f64700ddf97c5b34c68e884d03138b4b41ea58b38f8f7ebe1
SHA512

951036d0b4b2ffb6e70f1f32c1a87f3279e79cc9878c9fd420d2afa5f17ce1a7eeb051272238cc4636618443104794962f663637893bd12a5bbeaa220408be59
SSDEEP

3072:jEGh0orl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGplEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2025-01-11_34277795c25cc0bb11fef8d45405e2e2_goldeneye
- Size
  
  197KB
- MD5
  
  34277795c25cc0bb11fef8d45405e2e2
- SHA1
  
  4efdb571f1378aad240857e2d1810ec7d3117e8c
- SHA256
  
  b75332112017456f64700ddf97c5b34c68e884d03138b4b41ea58b38f8f7ebe1
- SHA512
  
  951036d0b4b2ffb6e70f1f32c1a87f3279e79cc9878c9fd420d2afa5f17ce1a7eeb051272238cc4636618443104794962f663637893bd12a5bbeaa220408be59
- SSDEEP
  
  3072:jEGh0orl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGplEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence