2512a5eeaaec7801927e50b9cc2f2dcf4f4ab8f65177e58c4f7df885da3b0fca | Triage

Analysis

max time kernel
118s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 14:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

StarSuit3/CL/ClientFeedBackEdit.asp
Size

11KB
MD5

60f107e3384a24ce9a2f32299b0bc2c4
SHA1

6ae132a467761c8e9e8297e7448fa4b872b4c131
SHA256

8ce657a4f02d4bd226e86e824a544024a14b6e1825c7f4e04cbf47e61a91fe1a
SHA512

7c41a3f00eb38449c2b450eb62b58bde1c43c303bfe38f7d74ea6bb8bfe0c6fb073bd9af1e8bd7b1e4679d746d93ee02a7bcddedde1f3cd0fc7fcd80baf3ca8f
SSDEEP

192:BjvUtp5JVrOOTxVpQrIq4QFvmqQLUyyQ4F4MZSQ814E4QXe+5rGk1+vUYRGk1xsE:en5JVrOOTxXQrIq4QFvmqQLUyyQ4WMwo

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\StarSuit3\CL\ClientFeedBackEdit.asp
1⤵
PID:2672

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2672-21-0x0000000002570000-0x0000000002571000-memory.dmp

Filesize
4KB

Download