4a11714691be34161cbdabd23b2f9267959fc23fb83a5df110b96bdfb47ad71a | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 02:48

Sharing

Report Analysis Logs

General

Target

admin/inc/error.asp
Size

781B
MD5

d74c02942a90511c93bc6b114ef4feb6
SHA1

403743fb699be83466fd4a178c106ffb938de138
SHA256

f38a5e08188894b2f8880cd5957383111c7bb9d5d8bc80e2fd0df3c4db138a12
SHA512

f499569a14fb3bd4b0cd90489edfcf7597abac840cdda636841b4e7a67364c96c85e9b1ceb7053f76af1cea4557ab4c3e1012b8bfa44a3bafc4ad69f67a5a173

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\admin\inc\error.asp
1⤵
PID:2000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2000-21-0x0000000002390000-0x0000000002391000-memory.dmp

Filesize
4KB

Download