a062aeb687dd340251577953de85e248f62b21e979ebffe1c64e982f726c8dfa | Triage

Analysis

max time kernel
118s
max time network
135s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 09:46

Sharing

Report Analysis Logs

General

Target

慈溪小吃网 v2.0/admin/addyh.asp
Size

6KB
MD5

bcbeaa804563e4bf7ce6528c9e0bdc3f
SHA1

95242dd47c8c86425ed2114e5fe26757d64a334d
SHA256

7bee5e8d5ec468859510978355d63ce331be1b5c0e060dd76b292bc3ca54ef35
SHA512

ea86ad75bdc109c3f252869ad40539898e3cdc811bb6ab9b0d695ec40acca4e5fb3c925a6aefe267f7dea6f10d19371f719a431018a862ea2557272d58bfd5e3
SSDEEP

96:6fH0XRsRvIJOkOFmOmfDPDRJ73M02qHRjLX5f5BjCnLB4c9XPORzMHeHosSn6A7M:sUhmA7pFfP3M022pBiB4aiGjM

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\慈溪小吃网 v2.0\admin\addyh.asp"
1⤵
PID:1148

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1148-21-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download