3cb20c7e0cc76a8e8d9004a7944ef8bc4bd107d433257bcd5d91ae934207698d | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-01-2024 13:09

Sharing

Report Analysis Logs

General

Target

one/Foot.asp
Size

280B
MD5

c255bcfb230a789b21d930b0f6b41331
SHA1

59c92e2bd38f116f2b6ed29c8893de7e0bd6b9e3
SHA256

ac12f2f44d777e1808bca285eb6ce7815a13889dde5d6324f13a4e044f8fe755
SHA512

bc127d267c548dc28050e01f80f9bf0d2ecbcfc6e44f794bf7497683e8aaef80b9435cbd1fa3590a5cc9447407d9fd31aacf81eb3d41ca3c5527746c2e859ac8

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\one\Foot.asp
1⤵
PID:1132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1132-21-0x00000000020B0000-0x00000000020B1000-memory.dmp

Filesize
4KB

Download