576846bab817d3acbacbc54475bce7023522f0bd7317182272bb0b5f374231f0 | Triage

Sharing

General

Target

576846bab817d3acbacbc54475bce7023522f0bd7317182272bb0b5f374231f0
Size

346KB
Sample

220724-2pkhcabfbr
MD5

37fd0ccce269c278bffc4145eb205291
SHA1

12009b6ed87a4ff5d48087bcb819504e9beffb79
SHA256

576846bab817d3acbacbc54475bce7023522f0bd7317182272bb0b5f374231f0
SHA512

cbf4d973838b1f7e657df4742327ad45e37ec24ee2cc61369fb4a03b76c05938c6063cd7631b8e79e53ba0b83d95781289ce629a7d175d58da6b3f6eb5276c59

Score

10^/10

discovery suricata

Malware Config

Targets

- Target
  
  576846bab817d3acbacbc54475bce7023522f0bd7317182272bb0b5f374231f0
- Size
  
  346KB
- MD5
  
  37fd0ccce269c278bffc4145eb205291
- SHA1
  
  12009b6ed87a4ff5d48087bcb819504e9beffb79
- SHA256
  
  576846bab817d3acbacbc54475bce7023522f0bd7317182272bb0b5f374231f0
- SHA512
  
  cbf4d973838b1f7e657df4742327ad45e37ec24ee2cc61369fb4a03b76c05938c6063cd7631b8e79e53ba0b83d95781289ce629a7d175d58da6b3f6eb5276c59
Score

10^/10

discovery suricata
- suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverysuricata

behavioral2