35003b5301d02f9cfc84ea6ef0685a088376296f69de4c3d4c5d103ed64f5b54 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 11:40

Sharing

Report Analysis Logs

General

Target

hyih/admin/Exit.asp
Size

225B
MD5

36e880e1457d3d307f80d355434ac13a
SHA1

31bb483cdf4b7f5b76b2ed56c4aab77637df2370
SHA256

2c70860a41b7aacbc3485ad98a1607eab27545a70bb5a628581167f6335b5556
SHA512

8c888dbea1ce26ea01a70af2f322576c086c35949dc3101b568cd1c71822088ff55e7b71d1a5f13adf269896ccdeac37d5d8088a5a79b2c04e971cfb8d9697fa

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\hyih\admin\Exit.asp
1⤵
PID:2076

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2076-21-0x00000000005B0000-0x00000000005B1000-memory.dmp

Filesize
4KB

Download