4a11714691be34161cbdabd23b2f9267959fc23fb83a5df110b96bdfb47ad71a | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 02:48

Sharing

Report Analysis Logs

General

Target

admin/admin_liuyan.asp
Size

3KB
MD5

71dd895cd81d3d93c274682da77a0001
SHA1

ea98b283d6dfc7c79d18d171891a469acce2017f
SHA256

ceabe670de2e3eb00843a7f84dba407ee5481af1f69ef5e1bf51064945927faa
SHA512

875cc5c46d958ad534e1d20e41106ed9568cbd4c3e3286a61d0ce1b81e0385b5c2deff9f91814c90a30f30ce0f0c83f4d14c0152f17fd8af3b1078e48e25b0e8

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\admin\admin_liuyan.asp
1⤵
PID:2248

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2248-21-0x0000000002270000-0x0000000002271000-memory.dmp

Filesize
4KB

Download