4d96012f1b58dbd4a2161a2cc70fffaf4897c79073b8e9fb0259b705400285e8 | Triage

Analysis

max time kernel
146s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04/07/2024, 00:26

Sharing

Report Analysis Logs

General

Target

yxcompany/admin/add_news.asp
Size

4KB
MD5

4fd7be6f24dd0931cb8f052b0b265140
SHA1

5c821baf8de63c254a6cb4d642151650d4ea1960
SHA256

dc1abe89dfe827046cfea77d6484a56da85d4c8a069fbf2c71a5cf650846debf
SHA512

ce11ebd37f793d597ce3561a846be406095e2b294e7b9cab9dca32c1636b223c2adef38dcef534ac903e30213bc0488fc9056a1cf4389604037728bc62a67b8c
SSDEEP

96:WRKtiEL6rr318OrPeyWuxviNTuPFcIWUjv7mssGoJg4smOXB4v+6E4:WPr3+rEiNTIWUroc4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\yxcompany\admin\add_news.asp
1⤵
PID:4032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads