56c69fee06412f46971306794c7d55994683f244d4eb44d5ebe7b4ff899886eb | Triage

Sharing

General

Target

56c69fee06412f46971306794c7d55994683f244d4eb44d5ebe7b4ff899886eb
Size

2.0MB
Sample

220725-b5zdbshggl
MD5

2e7268435249a71385c5a9bb51aada53
SHA1

e642c3f34ac0f7b339dd163d41b757be9dae3398
SHA256

56c69fee06412f46971306794c7d55994683f244d4eb44d5ebe7b4ff899886eb
SHA512

6fc63dac79012133bc685e817b35c7ac336771c89896d67d0a7e79b0a311394d0113778fef32d8d825077559fcf724bb26e1829950197af0f64768b8d44d29e0

Score

10^/10

discovery suricata

Malware Config

Targets

- Target
  
  56c69fee06412f46971306794c7d55994683f244d4eb44d5ebe7b4ff899886eb
- Size
  
  2.0MB
- MD5
  
  2e7268435249a71385c5a9bb51aada53
- SHA1
  
  e642c3f34ac0f7b339dd163d41b757be9dae3398
- SHA256
  
  56c69fee06412f46971306794c7d55994683f244d4eb44d5ebe7b4ff899886eb
- SHA512
  
  6fc63dac79012133bc685e817b35c7ac336771c89896d67d0a7e79b0a311394d0113778fef32d8d825077559fcf724bb26e1829950197af0f64768b8d44d29e0
Score

10^/10

discovery suricata
- suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverysuricata

behavioral2