56799ad6dfa85412708fb0f3e4677b726eedd32c2ebae73c8d3dbb8d494f28a7 | Triage

Sharing

General

Target

56799ad6dfa85412708fb0f3e4677b726eedd32c2ebae73c8d3dbb8d494f28a7
Size

220KB
Sample

220725-dm7yvscdfn
MD5

1c4b503ec602643b186eefde6c87d20b
SHA1

9c6cecb04107bbcd4adb153ba7ec7cdc9886655b
SHA256

56799ad6dfa85412708fb0f3e4677b726eedd32c2ebae73c8d3dbb8d494f28a7
SHA512

e7b5805ea1e99165600bf882177c8aa4c54fac0dcc069ac7f80a1f75d581b96948d3e3066c78465c928cd917767f25646f071257151cb9c9c09e87563156ab4e

Score

10^/10

discovery suricata

Malware Config

Targets

- Target
  
  56799ad6dfa85412708fb0f3e4677b726eedd32c2ebae73c8d3dbb8d494f28a7
- Size
  
  220KB
- MD5
  
  1c4b503ec602643b186eefde6c87d20b
- SHA1
  
  9c6cecb04107bbcd4adb153ba7ec7cdc9886655b
- SHA256
  
  56799ad6dfa85412708fb0f3e4677b726eedd32c2ebae73c8d3dbb8d494f28a7
- SHA512
  
  e7b5805ea1e99165600bf882177c8aa4c54fac0dcc069ac7f80a1f75d581b96948d3e3066c78465c928cd917767f25646f071257151cb9c9c09e87563156ab4e
Score

10^/10

discovery suricata
- suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
  suricata
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2