e13c66ae1d4df6f6b364aa1ab9b305bff536c16701d18e0544d7498fa5fa90ab | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-01-2024 01:45

Sharing

Report Analysis Logs

General

Target

gfhcx.asp
Size

1KB
MD5

fb6faed53d1f190f5da9723134953e0c
SHA1

1550434d032d081b417aaa5f75ededb182fc465b
SHA256

cfa0a2ced265741bec4d08b26144618d74e3e9cac8ed000d10a3fde5fb57e31c
SHA512

d2f3a2fe9ec2ba0aa53b7c13cda1f340edeaa6a71fe6816cac06cb157b8d6bf4be180ed0000f5cbecb3158bcbc805f58afb0dd5491f37516f081674c00fca1cf

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\gfhcx.asp
1⤵
PID:3008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3008-21-0x0000000001F00000-0x0000000001F01000-memory.dmp

Filesize
4KB

Download