e13c66ae1d4df6f6b364aa1ab9b305bff536c16701d18e0544d7498fa5fa90ab | Triage™

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01/01/2024, 01:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
action.asp
Size 2KB
Sample240101-b6f85scca4
SHA256 339568db9f17724d3caad23f97e694c70c4103368d3f886b99f862376f40dfde
MD5 1e20dfd140e96a27afae084f3e332a59
SHA1 6a8293df40c490e83a8416c4bbd02f910206f22d
SHA512 873e9551f9b6a7d023d5372b2a09828196904c8aff752f3153ae3390cb9062c9b9104aac0db476cdaf75473f968477f878f5cb713287411c5b32f3a811d95413
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\action.asp
1⤵
PID:1688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1688-21-0x0000000002370000-0x0000000002371000-memory.dmp

Download