557907e2f31314e6722c5b851b000c7dfe37eb8cee53d00f7ea97206bda35259 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 23:15

Sharing

Report Analysis Logs

General

Target

仙剑情缘网站系统/admin_evalSql.asp
Size

1KB
MD5

f8d6af6a07650fb347c0a4795979a1c3
SHA1

4c936b2a39a4983cf071d79a62d6ec80c2b33ccf
SHA256

4393277d914938bd8e4ff18b63e51a59638452fa1898b448fc6aaed2271664b1
SHA512

6c041983e8bec685784464b990d050ebfdb13e09f1ca6d1d7c4f0bed05c708f34daddf55f794e5baf34e1039466df165ff9cd96d3e890175fd3df18e8609b30f

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\仙剑情缘网站系统\admin_evalSql.asp
1⤵
PID:2876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2876-21-0x0000000002340000-0x0000000002341000-memory.dmp

Filesize
4KB

Download