3cb20c7e0cc76a8e8d9004a7944ef8bc4bd107d433257bcd5d91ae934207698d | Triage™

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
one/Foot.asp
Size 280B
Sample240119-qdyeaaeegr
SHA256 ac12f2f44d777e1808bca285eb6ce7815a13889dde5d6324f13a4e044f8fe755
MD5 c255bcfb230a789b21d930b0f6b41331
SHA1 59c92e2bd38f116f2b6ed29c8893de7e0bd6b9e3
SHA512 bc127d267c548dc28050e01f80f9bf0d2ecbcfc6e44f794bf7497683e8aaef80b9435cbd1fa3590a5cc9447407d9fd31aacf81eb3d41ca3c5527746c2e859ac8
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\one\Foot.asp
1⤵
PID:1132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1132-21-0x00000000020B0000-0x00000000020B1000-memory.dmp

Download