875d810edf34d3015dcfea1676cbc0a4b5dd37a8fe0254742436f4319f632a1a | Triage

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 02:39

Sharing

Report Analysis Logs

General

Target

jpflash10/11/inc/email_word.asp
Size

843B
MD5

1d9a1479645174a4c36f7f77c3c7e37a
SHA1

40ad5ee342a72e11dd5c9e7904ca3d22f5198bb7
SHA256

70fd3cc8d31864da38be23e985a41da7f63581d94f14314ad0d09d62b8a0b055
SHA512

cdcf791867d4d896752c740dd41f862dee3cb91a759fd39464a4de8d9f6878165844999ad946beba6a31dfd5070b09bdc59b7cf603e0303c92fe1127f91f767a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\jpflash10\11\inc\email_word.asp
1⤵
PID:3100

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads