4a3629231d6891ceb25f16870d9576ec8de06245bcc85d06011a4eafa4a4e0cb | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 08:29

Sharing

Report Analysis Logs

General

Target

wwwroot/Article/Special.asp
Size

4KB
MD5

76e2ec8ef7d8c696dbe8993c87758c83
SHA1

c01f1d2a2c505dd6d00ac028e3dd6026f1f873b8
SHA256

b5a02262a5451d909bfe7e4752bf08b6f58aed5c99e3203ff12a2b7f4c960d77
SHA512

cc9dcd12fecce4c448885c0b70b8fff4493317d5e309dbdd305f3210c05883c9f60d1299e2b64cb81445f7929804f2b458db9f00fb399c7c95e2ecdb9471441f
SSDEEP

96:D9GUPH8neW8QqV3J/NZybEtJ2xDMnZlDgrufsNXwzXSXEWlxhevj/YuxnvNoIxe:7PHC8LV39NZWEtJDJ8xNXwzXSXEIhAAD

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\wwwroot\Article\Special.asp
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2280-21-0x0000000002330000-0x0000000002331000-memory.dmp

Filesize
4KB

Download