d3713143cd1b13929124169c96bf178d3ad635c3714bff05e3c86723129b1935 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 00:06

Sharing

Report Analysis Logs

General

Target

粉红色风格女性整站程序可生成HTM/Editor/asp/config.asp
Size

2KB
MD5

fc4aaf3f5d52e6edff677c74c7e94b98
SHA1

b9dae3f41b437cd29c4a0f9aa5d7e7d8918b27f6
SHA256

88fa5a164d930920406e4ea22cac8ea5f589956b34c89c4301e22432559d8002
SHA512

a8dd5983c054ced7bf62b1941603aba435556a3bbf16d0b45a32683b9a796a43abd10bc4bd0a1bc5ac874169a17daa372f34702e58512fb2a9aded0b9e17c9e1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\粉红色风格女性整站程序可生成HTM\Editor\asp\config.asp
1⤵
PID:2928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2928-21-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download