af4eb7a351bfd9efbb1d8660595e75e318f4a6e54f147a437a09d598c71796f8 | Triage

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 14:22

Sharing

Report Analysis Logs

General

Target

可创工作室 v2.0/3-1.asp
Size

7KB
MD5

0bbfd4592ed2d1f1747db3c52351decf
SHA1

11b43b8f438c626ab83222ab65ba2b024c1e5887
SHA256

2c4a918e3c0749c7c42657afcbcf145da5092d9acf2c58462c5c4d976c351699
SHA512

a4cf1f18bf225711f952042f306a142ad8a0bbe853b5ad01f77195e0533c26f78461bb18a4ad25b71699b2b4374b5b54c4d411dc9fb6384a12980e2597d472f0
SSDEEP

96:eGvnvm3qDViBcrji15wPsZAlVNsYAQRR56xclukN0ba1xxtcIl2O6Jlw6ale0a6x:eGvnZRnzH56aO/IgOmG9g0ac8g

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\可创工作室 v2.0\3-1.asp"
1⤵
PID:2024

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2024-21-0x0000000002270000-0x0000000002271000-memory.dmp

Filesize
4KB

Download