1c9e58e71c0e398c9e0cd687762d3df30a5c33743d9064794f5cffb3895674c8 | Triage

Analysis

max time kernel
117s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 01:29

Sharing

Report Analysis Logs

General

Target

网愿科技-人才网 v2.1 Build 1228/aboutus.asp
Size

14KB
MD5

b2cdeaf8cde8eb98ec365addfdb717fd
SHA1

1836d454a9536f03282e8f2114c502e0156adfaa
SHA256

70b14d7757e4f90c8e0a8eb9a3f6da6bec1ace5a220b4a74a6d831a00958ffd2
SHA512

445143a77fcd0f614134cf8fb3a7d1bcaa2bcd053d56d1a8f7d09de04c558cd4fc7e7bf85c5a3aa3e0f3fb362e4d0ec322d0e3856c5aa04b4e9f680465296677
SSDEEP

192:FReBV7JSenDSjL6PXFQET3hU2S7U+SQUJSQUxSfXpScCSuSSuJSfMl0naT3oUGSW:FReBd0i1Nb70id8ac7GTqNjnGBk6Yt/d

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\网愿科技-人才网 v2.1 Build 1228\aboutus.asp"
1⤵
PID:2188

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2188-21-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download