Overview

overview

10

Static

static

55fa186f6d...fe.exe

windows7-x64

10

55fa186f6d...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55fa186f6df2d9a52cf7b16198d7f7eeae8f7a5b1ba0bc95332d5c0aafd5b2fe

  • Size

    345KB

  • Sample

    220725-gz4czsacer

  • MD5

    6988b078c42e45886025e7c968f68112

  • SHA1

    0eabf4df1ec0f9142b49560a4fb99e85e41400b2

  • SHA256

    55fa186f6df2d9a52cf7b16198d7f7eeae8f7a5b1ba0bc95332d5c0aafd5b2fe

  • SHA512

    34bf14ba303d262a9e0bf2bba7bf60ed1265f11472e88e1562f73c6660ad0ecf73b3ce9443faf27fa6030a28b969b862ac1d893a54215620aad417ad181e6078

Score
10/10
discoverysuricata

Malware Config

Targets

    • Target

      55fa186f6df2d9a52cf7b16198d7f7eeae8f7a5b1ba0bc95332d5c0aafd5b2fe

    • Size

      345KB

    • MD5

      6988b078c42e45886025e7c968f68112

    • SHA1

      0eabf4df1ec0f9142b49560a4fb99e85e41400b2

    • SHA256

      55fa186f6df2d9a52cf7b16198d7f7eeae8f7a5b1ba0bc95332d5c0aafd5b2fe

    • SHA512

      34bf14ba303d262a9e0bf2bba7bf60ed1265f11472e88e1562f73c6660ad0ecf73b3ce9443faf27fa6030a28b969b862ac1d893a54215620aad417ad181e6078

    Score
    10/10
    discoverysuricata

    • suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole

      suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole

      suricata

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks