4a11714691be34161cbdabd23b2f9267959fc23fb83a5df110b96bdfb47ad71a | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 02:48

Sharing

Report Analysis Logs

General

Target

admin/del.asp
Size

690B
MD5

9f1009c7319d2153702b73c9d5f160b3
SHA1

116f55ff55641a430763c1b1eddc3c21b5851ce3
SHA256

2ddded0e03f8f00aa277ec4c4e2716b3c7fcfb95954ca88d3ab67bab9d150ea2
SHA512

b7f253d9db99bf64cc38fa988474033173ed8a03e45625ed2bffb7ca0e6fec66c8cfd49e69d865d0198db7c682c548e3b606b72baec7512d1052506f2fa6704c

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\admin\del.asp
1⤵
PID:1728

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1728-22-0x0000000002380000-0x0000000002381000-memory.dmp

Filesize
4KB

Download