23b0071240dc52b9ed1ed7eb3c46fdd5322d51b4a7e0f4cfc02a2848d007f01b | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 08:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

RCRCBBSV1/AdminList.asp
Size

2KB
MD5

ae62050101183472b5007043a76f98c4
SHA1

ba1c58746e267c5891aaa68bf34073862c3016ee
SHA256

1e0dde79306b37195cd10e7669a9c926ef1713cfd8869aea79bba9e01304d077
SHA512

b4988a415792f7e80728b9af7195d682dc508983db10381a7b04ea87f3aa42c8e8ddf65aef74901d5b9ed3c97fbbcb83b538eb6f34ae5534fdd550994bcd9839

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\RCRCBBSV1\AdminList.asp
1⤵
PID:3068

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3068-25-0x00000000004D0000-0x00000000004D1000-memory.dmp

Filesize
4KB

Download