e80ed7363610edf1fa4b371eab11755a738951d696909c5b815d9b1ed0f71295 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
09-01-2024 04:34

Sharing

Report Analysis Logs

General

Target

QQ免费资源网 v1.1/Admin_Admin.asp
Size

44KB
MD5

1d9984e9a96937637bffb00da9768039
SHA1

b1b7e4d8504c63cc8c6d443fda910e3409334398
SHA256

9a056b3ead1a64fe8a21de9edc6126bd190f980033f074648f13376fbeff90d6
SHA512

6efc1f72d874e67702636342525878f6be2faf3a581825b2ced0df12a3c63cb91aa48b9e6679e57db70bf0dd9405c58218e677e8e756eeddeb33dc28f46b98d4
SSDEEP

384:UrlMJiwGyKhPVEBM9wVcFH+nLVH6+LVLgkmrAD8faiQOrP/P4aZB2KLG3GL:UhmUNwJ9WQO8aZbLG2L

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\QQ免费资源网 v1.1\Admin_Admin.asp"
1⤵
PID:1364

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1364-21-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download