21dde331f8e67267a53e8a7d4bd4b9c4b86ec3a3760a87e2a454f5a690a70969 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
03/07/2024, 16:13

Sharing

Report Analysis Logs

General

Target

ywsy/Delete/deleteproductimage.asp
Size

604B
MD5

b0740c2a78937baa8e535b0c5abd5c63
SHA1

0e89d882e78fee99bb188b52875d227ee20e0169
SHA256

04eb32dc615ab0b2195d1ee1e3575ac95d8e8c1cb907c01e8dfdbfbd09f169e2
SHA512

592ef516ddc365efe462f86ab14755c0a7e5212f3544ffd68d95e6f8ca2493206f9ae57f012361426a52bc7883d7461abbbdfed69ae39584187f036f8af4eee1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ywsy\Delete\deleteproductimage.asp
1⤵
PID:2084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-21-0x0000000002470000-0x0000000002471000-memory.dmp

Filesize
4KB

Download