5776ecb421fd54d305c09f6cb5fe33b7984ad9bce75255f41638ae333f9cb8b7 | Triage

Sharing

General

Target

5776ecb421fd54d305c09f6cb5fe33b7984ad9bce75255f41638ae333f9cb8b7
Size

255KB
Sample

220724-17gzhaafbk
MD5

0ca72e98a69b7943d2cb4f4a775ac89d
SHA1

3879ccd2acc97a7823def38eb0e6701035ae7987
SHA256

5776ecb421fd54d305c09f6cb5fe33b7984ad9bce75255f41638ae333f9cb8b7
SHA512

9d1ef7c527ba63cc268f8161b51a59988e79f4e0036039dfcb93d5b2fda1e5c458b082b7fdea250b20c3825718d1c05b088f0752cb7c5d80889713e4181f586f

Score

10^/10

discovery suricata

Malware Config

Targets

- Target
  
  5776ecb421fd54d305c09f6cb5fe33b7984ad9bce75255f41638ae333f9cb8b7
- Size
  
  255KB
- MD5
  
  0ca72e98a69b7943d2cb4f4a775ac89d
- SHA1
  
  3879ccd2acc97a7823def38eb0e6701035ae7987
- SHA256
  
  5776ecb421fd54d305c09f6cb5fe33b7984ad9bce75255f41638ae333f9cb8b7
- SHA512
  
  9d1ef7c527ba63cc268f8161b51a59988e79f4e0036039dfcb93d5b2fda1e5c458b082b7fdea250b20c3825718d1c05b088f0752cb7c5d80889713e4181f586f
Score

10^/10

discovery suricata
- suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverysuricata

behavioral2