573eb40a8a33c917aa4893b6ee0155df68493ca104d9f3f37c577fa4caf0d77e | Triage

Sharing

General

Target

573eb40a8a33c917aa4893b6ee0155df68493ca104d9f3f37c577fa4caf0d77e
Size

341KB
Sample

220725-aen91aegcn
MD5

7f7abb003b0209b091bece780080e56b
SHA1

1df896b7dc1bacc139976f44b48ae7d58a3d4015
SHA256

573eb40a8a33c917aa4893b6ee0155df68493ca104d9f3f37c577fa4caf0d77e
SHA512

804af047fd390a100a198918dec0fc433645b18dd4279b46ca42017cf55d57b1f41686c166af7541ca3e7e6db62be77d79b1d7e086d1da25330306f46e34c1ff

Score

10^/10

discovery suricata

Malware Config

Targets

- Target
  
  573eb40a8a33c917aa4893b6ee0155df68493ca104d9f3f37c577fa4caf0d77e
- Size
  
  341KB
- MD5
  
  7f7abb003b0209b091bece780080e56b
- SHA1
  
  1df896b7dc1bacc139976f44b48ae7d58a3d4015
- SHA256
  
  573eb40a8a33c917aa4893b6ee0155df68493ca104d9f3f37c577fa4caf0d77e
- SHA512
  
  804af047fd390a100a198918dec0fc433645b18dd4279b46ca42017cf55d57b1f41686c166af7541ca3e7e6db62be77d79b1d7e086d1da25330306f46e34c1ff
Score

10^/10

discovery suricata
- suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverysuricata

behavioral2