3f500a52d108a2e1c66a3bdcd2b408ac4f2487ac916967102bbe95f80c1cd280 | Triage

Analysis

max time kernel
118s
max time network
127s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 08:36

Sharing

Report Analysis Logs

General

Target

flash521/admin1/logout.asp
Size

166B
MD5

ba51f85fc876cba1f5ff5554f4b2b57b
SHA1

5293551bc8dfc959cc19e6b20a17b146d1f1460b
SHA256

be3cf03424c50ed776cbb0f633c6ca7604aeb8fd6ea0df2ad5220a9036cd82ff
SHA512

9f6a3e97680ad3b22878b92c44fd1dc91f8d7bed0878ee76c397da6d463de1c9de65591555e1962ad573c759dc33de9b43c16d142a7820822d6c6a944e2ca9e7

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\flash521\admin1\logout.asp
1⤵
PID:2168

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2168-21-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download