45d8ac0c6817084b5db30113340ae26397a635873b3fb15b9b1d09060a7701a9 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19-03-2024 11:49

Sharing

Report Analysis Logs

General

Target

SZ企业快速建站系统/clear.asp
Size

858B
MD5

39c67313ae9a89b5e754cd727b342a21
SHA1

d13ce33f47e92299e133f584cf8e6ff68fa99450
SHA256

ad02cfb67f82df594b5982d18804c97680177503eb3012f789826097b65e9964
SHA512

9c9b48677009427cb9659d695084deeeded2c04639229003e8bc06b6186f29264bcb4964f5276dc180d4e5666130964134bef64bc41ed75b2b39e646e825a529

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\SZ企业快速建站系统\clear.asp
1⤵
PID:2224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2224-21-0x00000000021D0000-0x00000000021D1000-memory.dmp

Filesize
4KB

Download