148b54a701e3abe2513e1f12b9923bffa4c52377d93add142374cd18d8f53fc6 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 08:10

Sharing

Report Analysis Logs

General

Target

801/2006/business.asp
Size

3KB
MD5

ae823b6b94b23a60991cd22fdf418c3e
SHA1

b2b1b2a50df932dc573dd0599aa7d61cecd9a58d
SHA256

6dbe2052d54fe863aa76a72cadff1a705f383b8ccb95bfce10af9d9a3cd8ac7e
SHA512

de1c8e1fbfed0a58446d425af7fea2c718f993d13da3c3ca225078c2cd6feb646142c86108186bca799ae9d92838c4eb6af7a709962a05c46c4e96fcc59a8e09

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\801\2006\business.asp
1⤵
PID:2080

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2080-25-0x00000000022A0000-0x00000000022A1000-memory.dmp

Filesize
4KB

Download