4a3629231d6891ceb25f16870d9576ec8de06245bcc85d06011a4eafa4a4e0cb | Triage

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 08:29

Sharing

Report Analysis Logs

General

Target

wwwroot/FriendLink/FriendLinkDel.asp
Size

8KB
MD5

b46872ccf178632befaa1079a0c01262
SHA1

a67703e01d9fbbdc53e64d11d31a66c31799b934
SHA256

67292bbe7fdb04ad10cb570d9885e93a965fa7b7e7c0eb187ea1142f92cca140
SHA512

33c85c1bf62aa74a96f979f30437d3f3b7854f0cd9c2d0424bc03c43f94414bda7b52fb311457df11bd07cd108bd099a7164a4c674f3a82282dcb3641b5fced9
SSDEEP

96:DGw4fP7HPHLzOYeYZZn7QVFrk9iSvIS14zmP4d4TBT/4D9t1eEAQeu8s:xeP7vHLzcA70A9BPlIKE1h8s

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\wwwroot\FriendLink\FriendLinkDel.asp
1⤵
PID:2232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2232-21-0x0000000001F70000-0x0000000001F71000-memory.dmp

Filesize
4KB

Download