dc205cd1fbff23471ec7890d62567238f4baa14f41ca36ef16d4a74e9a0b86dc | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 22:36

Sharing

Report Analysis Logs

General

Target

Ch/DownShow.asp
Size

4KB
MD5

840ac1ccf08290aac09b54b2da01efa4
SHA1

2ecbd1c005392d6874853e9b2cc3a7fac9da28e5
SHA256

bb63be9cf75bb019a26e0fae8d2a9916499350fdf3aa449f110d8891e669167e
SHA512

265c56d441984dd7098e71756098ae238a21feedf8fb3f28a6a062b5b91238d6bf54e8f356facf0da8343b8306189997034b851d95c35aedde924422a064705c
SSDEEP

96:jlcoeABIqF/qeGAibgSlgk73ghpZAgt9mspAIxzZKt9+y:jEKitcpvtY+pZKtsy

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Ch\DownShow.asp
1⤵
PID:2152

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2152-21-0x00000000024B0000-0x00000000024B1000-memory.dmp

Filesize
4KB

Download