ce72edeb8bae183b618a86d3e0cf3cb280cee47c8bfedd6014e98d9053a5b8a6 | Triage™

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/04/2024, 03:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Demo1/dele1_yb.asp
Size 5KB
Sample240421-d2m71aab6t
SHA256 5177027c1c299aa806e2769c3fb24fc1ae65ebb643f264c9b234482a0edee824
MD5 89ad218f939b66c9978fd7320c83f2a7
SHA1 25475228a390a24de7e83dc3953e7f8b1413c9ca
SHA512 e7b3fe9f1eb79fe5f5142727e65f6937c8679f4d39f9d54523afbee81c06322ec74bed66dddbbe6148bb07095225de645017494e9f75080595b304732c5df6e5
SSDEEP 96:HV+G2QsTSTZ2Xaj/HNLbU3PR9lti3/wWHbkC7rDGqPL38nHe/NoshixBwW8oBuII:HV+G2QsTMZ2Xajf1bU3PR9lti3/wWHbx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Demo1\dele1_yb.asp
1⤵
PID:3016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3016-24-0x0000000000490000-0x0000000000491000-memory.dmp

Download