04b73ddfcdfa586470a5f8cd0ca671e471bd5dbef97b466a7180a856bfe5610e | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09-07-2024 01:37

Sharing

Report Analysis Logs

General

Target

SxShop网络商城 v3.1/Admin/AdminMember.asp
Size

5KB
MD5

382c2e7edc1bbaf66a887e45eccc81fc
SHA1

04d2eba2e1b8dbfa7a758cb71aa8e1ccebcc7380
SHA256

5fbf7781d99173560545b269b7ec5c87106fe9278f16d64fd3c06ecc4bbc2077
SHA512

0b872642588f8d1b4af7679aa5490bcbf878dbb0d02f26e257a882e5c4668ad89c255d883c2b0d451d4342b5e50e0e2512041340308b508fbefa66d4ac2e601f
SSDEEP

96:5eUsmRFv6syucmzcovxcHPrc7ac9kcVdcOAcvEWc+RcRJckPInSrefnbcQuOyqA0:5eBsDcmzcAxcHDc7ac9kcVdcOAcvDc+H

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\SxShop网络商城 v3.1\Admin\AdminMember.asp"
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1628-21-0x00000000020E0000-0x00000000020E1000-memory.dmp

Filesize
4KB

Download