b7a9fdda8e6af7d1362ad99da55a301b638cb4525eaad703cc12c7ebb47761d5 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03-02-2024 13:23

Sharing

Report Analysis Logs

General

Target

柯师电器/admin/dingd.asp
Size

5KB
MD5

29505985b534a64a5f6a268e88670686
SHA1

7059fdc1772ccb7961e213ae2c2962c57857395d
SHA256

952702a697055de637a2b5ee77aeadbd55dc3c0dfa7377e6815651dffe36b11a
SHA512

82ff2b674e6da3e2891367f8cd6bb88c3c1a8ea3501e4ccf4c48fe8194d3a9bc02e5cfc3ea6305dd08fec5a4db7a27b38985c72ae99005bf9c26bad1603f3e3a
SSDEEP

96:oJkwgzIN4j8ozby1xnJWcpQg1JdJlloooolxM6lPaENnqf+ejeWl8P:oJk1z9jsJzU8pP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\柯师电器\admin\dingd.asp
1⤵
PID:1264

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1264-21-0x0000000002050000-0x0000000002051000-memory.dmp

Filesize
4KB

Download