Description
This may indicate a network scan to discover remotely running services.
sora.x86-20220521-1450
General
Target
Size
Sample
sora.x86-20220521-1450
30KB
220521-r7mejsdacp
Score
9 /10
MD5
SHA1
SHA256
SHA512
b08f48ad84a0d2ef40d3b4417666a264
5c35bca8f3df6d7c5b7debcf5dbecd0f886b1108
a25b6e88ccbfb17e2710ce66395d3fb7497c7bb39132bcc62f7cfecebc5a96ea
bb6cb70bf7942e3921dd49808d3272c5d0784b50d3e1676598e430b2b38bc2fa8ab55d9bae826d15e10e9cf6c0e30b687bb328d9a73031f0c7cbcaa1a0c909a8
Malware Config
Targets
Target
MD5
Filesize
sora.x86-20220521-1450
b08f48ad84a0d2ef40d3b4417666a264
30KB
Score
9/10
SHA1
SHA256
SHA512
5c35bca8f3df6d7c5b7debcf5dbecd0f886b1108
a25b6e88ccbfb17e2710ce66395d3fb7497c7bb39132bcc62f7cfecebc5a96ea
bb6cb70bf7942e3921dd49808d3272c5d0784b50d3e1676598e430b2b38bc2fa8ab55d9bae826d15e10e9cf6c0e30b687bb328d9a73031f0c7cbcaa1a0c909a8
Tags
Signatures
-
Contacts a large (20207) amount of remote hosts
-
Creates a large amount of network flows
Description
This may indicate a network scan to discover remotely running services.
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks