573ed8f329b89e8dd8ccfc11851403dc4a4c03a620fde7b80cd456d32a173095 | Triage

Sharing

General

Target

573ed8f329b89e8dd8ccfc11851403dc4a4c03a620fde7b80cd456d32a173095
Size

338KB
Sample

220725-aecwzaegbk
MD5

0cf25f8271ddc55ab3503f7a841a0229
SHA1

bcd5dbb138fc7ba3d34563c96e01d2a5eb7bf8ac
SHA256

573ed8f329b89e8dd8ccfc11851403dc4a4c03a620fde7b80cd456d32a173095
SHA512

a7c960672b25d8eb8708156701175fa133a3aa10ea64dccb48c18d0c7d075261f16697e5602386c112ba2211e7ad79d9fc07345bc9c078a590ac7d3bccac2b0d

Score

10^/10

discovery suricata

Malware Config

Targets

- Target
  
  573ed8f329b89e8dd8ccfc11851403dc4a4c03a620fde7b80cd456d32a173095
- Size
  
  338KB
- MD5
  
  0cf25f8271ddc55ab3503f7a841a0229
- SHA1
  
  bcd5dbb138fc7ba3d34563c96e01d2a5eb7bf8ac
- SHA256
  
  573ed8f329b89e8dd8ccfc11851403dc4a4c03a620fde7b80cd456d32a173095
- SHA512
  
  a7c960672b25d8eb8708156701175fa133a3aa10ea64dccb48c18d0c7d075261f16697e5602386c112ba2211e7ad79d9fc07345bc9c078a590ac7d3bccac2b0d
Score

10^/10

discovery suricata
- suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverysuricata

behavioral2