Hatching Triage Sandbox

Automatic deploy

Supported by Filigran

Detection & Response Enablement

Overview

Hatching Triage connector detonates files and URLs in a malware sandbox, extracting malware families, C2 infrastructure, network indicators, and MITRE ATT&CK TTPs.

Hatching Triage is a malware analysis sandbox that automatically analyzes malicious files and URLs, extracting configuration data, network indicators, and behavioral information.

This connector submits files (Artifacts) and URLs to Hatching Triage for dynamic analysis and enriches OpenCTI with the results including:

Malware family identification
C2 server addresses and URLs
Network indicators (domains, IPs)
Extracted credentials
MITRE ATT&CK TTPs
Dropped files and configurations
Botnet and campaign information

Basic information

Integration documentation and codeHatching Triage Sandbox

Type

Connectors

OpenCTI compatibility version6.8.13

OpenCTI deployable from hub version6.8.13

OpenCTI Documentationhttps://docs.opencti.io/latest/usage/import/external-connectors/

Shares1

Hatching Triage Sandbox

Overview

Hatching Triage connector detonates files and URLs in a malware sandbox, extracting malware families, C2 infrastructure, network indicators, and MITRE ATT&CK TTPs.

Basic information

Cookie settings