3cb20c7e0cc76a8e8d9004a7944ef8bc4bd107d433257bcd5d91ae934207698d | Triage™

Analysis

max time kernel
120s
max time network
135s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
one/End.asp
Size 408B
Sample240119-qdyeaaeegr
SHA256 6f753b1ef6d466db2d8b97249a9711cd00fb010e54d7d2b4ed2d5fc4275adc4e
MD5 fdb1955d32025a5a835af44091b60ceb
SHA1 c56db440d0bd63450b6c0dbf0e65a9b6b79ebb85
SHA512 beadb610cb7ceb1d580b04400cf827b7f4b82f12654d2fdaf11410b4ab0a6e022231f7c0e4f98a67ca29262fc87ef9b1d2e9377820b6433fb6004b91ec62d6cb
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\one\End.asp
1⤵
PID:2588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2588-21-0x00000000021B0000-0x00000000021B1000-memory.dmp

Download