3cb20c7e0cc76a8e8d9004a7944ef8bc4bd107d433257bcd5d91ae934207698d | Triage™

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
one/Express_list.asp
Size 5KB
Sample240119-qdyeaaeegr
SHA256 e98d4d884f366c5983e7082272ebbcd3288063bc3c8478289db15e6c405d490a
MD5 683e28975b18b94785f3cb0ec983e4dd
SHA1 b98e47f1ad2baaec0c51ed3c61d0a060e92dc012
SHA512 c82c64638ad97cf8a585b9d7e34e3de4477c468fc43eb89998fa9bf38615ab14a1618f30948863dd1aa11f3b0af313ecc42be12e7005465c24a008c7470aac25
SSDEEP 96:iU+1yGlGMt3C7JS2SFSRaKgQKlIyNokPR4MvA7LYj4FUA73J:iU5Or36JtotKgQnA4MvA7LS4T7Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\one\Express_list.asp
1⤵
PID:3056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3056-21-0x00000000021F0000-0x00000000021F1000-memory.dmp

Download