45d8ac0c6817084b5db30113340ae26397a635873b3fb15b9b1d09060a7701a9 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19-03-2024 11:49

Sharing

Report Analysis Logs

General

Target

SZ企业快速建站系统/contact.asp
Size

7KB
MD5

b18cb6985dbe6ba3dd4e96aa0a01bc22
SHA1

170d82df0f40ae8985b1f9d77ae903494adbb864
SHA256

041df926900a9fbdc485b3d20119960c063465b331df2b3b4ab01616819a9ec5
SHA512

5400a57805cc234c99beb534da3ecfba114c0000c78d29c08b7668b4796329b6de5f1219d158389f121dbdc9f8a5534027f7e985a1166649c51a6d6d08df9de3
SSDEEP

96:XemkIytNHvXh0t92uPAXyPGRfLhdRfLhD7fLhQRfLhVuPAXzZt9al7uZXu7x8+0w:XemRyLqthQf9f1fWf4WtVo8FYLCs

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\SZ企业快速建站系统\contact.asp
1⤵
PID:2176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2176-21-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download