72b1a81f6fb30acd759ea6bbcddad7e202383082638f94e4c17506f20e2a8d7a | Triage

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/04/2024, 03:56

Sharing

Report Analysis Logs

General

Target

WEB网址大全管理程序/Admin/account/ReturnLiuNian.asp
Size

12KB
MD5

5fceb141942115904cb09b56092848e4
SHA1

dd171cd643da61ad4f3bd208a2cd03bd830a67fe
SHA256

89872e1487ce5f7cdc20e29d35e8d770d7672d14bc84beca3e1b02b0a286f5a7
SHA512

695924c1a58f1b3c2fbafa3713ad8e9cc66a6ce646c59ef064d1767d2d2a052f536997641270fd96d3f131002c1dbca86c3c510e68f43d1a117c5a052d553f41
SSDEEP

96:cWT4f7aOnYOwOnX9HnNf2wDmsAMeqmRqMQ27ogecxSnAKom/PTIE14WbE1EGnE1i:jT4f+TLEP+wDmwawTXX0Oa6I2Tc6MbWO

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\WEB网址大全管理程序\Admin\account\ReturnLiuNian.asp
1⤵
PID:848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/848-21-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download