af4eb7a351bfd9efbb1d8660595e75e318f4a6e54f147a437a09d598c71796f8 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 14:22

Sharing

Report Analysis Logs

General

Target

可创工作室 v2.0/2-2.asp
Size

8KB
MD5

c96755a8d601f275f2bb11ed6fac32f5
SHA1

9243b23804d189c4f524b960d8c1710a604987ad
SHA256

0ad7b7bd766785b0627f04ab98e0185b0ee7ae3a515912778406d90fd58ab7b6
SHA512

ba1982025899fba25c2488765d46a8a0885c9e1c540c9aaf89e6603b5601d2017ad85c98b8ed6eeaa39c7bf63d6db52df0b60469223aa8e30d7aa9e3ced92f92
SSDEEP

96:eGvnvm3qDViBcrji15wPsZAlVNsYb6MQRR56kw/L0040TtZl2O6Jlw6ale0a6lpW:eGvnZRnbUH56V405gOmG9g0ac/g

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\可创工作室 v2.0\2-2.asp"
1⤵
PID:2948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2948-21-0x0000000002730000-0x0000000002731000-memory.dmp

Filesize
4KB

Download