b7a9fdda8e6af7d1362ad99da55a301b638cb4525eaad703cc12c7ebb47761d5 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03-02-2024 13:23

Sharing

Report Analysis Logs

General

Target

柯师电器/admin/case.asp
Size

4KB
MD5

b3cc326cdb475c61521511e63b3fd9ce
SHA1

12a227d5b27aa27ed21b440c5be95f0b404666f5
SHA256

2689485f5415ed8440f74c57e95c7831c2dfbb1b6b99928a37390709d80d5046
SHA512

9bc91f655bf2ff4c4dd8ea491d211804c3e623ae6a0996b1e906958cbffafa4540bb45f5335535050ad17c269f0ac298144d669af1fe75ff93af8c6e387f2da5
SSDEEP

96:o2kY3Nz+86EnZsRh0KFHL86EnZsjXn08fcYJP:o2kyNzRM0GHSOXnFfciP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\柯师电器\admin\case.asp
1⤵
PID:1976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-21-0x0000000000500000-0x0000000000501000-memory.dmp

Filesize
4KB

Download