85a13924ef755048ad182ebe37b46dda940416ed7e8233a892a5aca7e685142d | Triage

Analysis

max time kernel
14s
max time network
20s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 14:19

Sharing

Report Analysis Logs

General

Target

YUKI工作室 v1.0/admin/0591_Admin.asp
Size

3KB
MD5

c77407e02f7d570c1566102d5302e929
SHA1

4adbebae32a0315c3b38138aee639a2bf5daddf7
SHA256

3426f36fdf24a08935eef2d6dc3901f8507bb63770a5d252f743a2c741d9d1cb
SHA512

b834c196634a8510695b138ac136e92cb3941291e62d5843bb685284203200ed525d21b35c69733bf225d4f89848257bb2d67104f25a264979af725e15b9cd65

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\YUKI工作室 v1.0\admin\0591_Admin.asp"
1⤵
PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2064-21-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

Filesize
4KB

Download