e80ed7363610edf1fa4b371eab11755a738951d696909c5b815d9b1ed0f71295 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09-01-2024 04:34

Sharing

Report Analysis Logs

General

Target

QQ免费资源网 v1.1/Admin_Advertisement.asp
Size

31KB
MD5

d88daf2d4ebc31d0aba77cec204a5d4c
SHA1

db6da4593e05ba69e0ad28c4598c40040da41052
SHA256

6a491cc1df87cebadcd8500d02a8ec90a1d8bc363112d2d9ddaa7c1e9af6f436
SHA512

e7e7069816a29957bd9b12643d8748f2c126c0f28c559331ba24a635abfef051dde2debcd52120b46e20271b2f623b14d3d81f7d0703a83301130a81d81b3a55
SSDEEP

384:lTrqVCiUi7iUiqiKiX2F9UaeCJL6fHbpf8HfA8GKe8S7FVEKK4mKfxZOeumXqe6f:VOVrJeJTzGtR2HYiVQrw4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\QQ免费资源网 v1.1\Admin_Advertisement.asp"
1⤵
PID:2324

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2324-21-0x00000000004D0000-0x00000000004D1000-memory.dmp

Filesize
4KB

Download