e3d5fb7e09704e0d5ac9c3395c9328c1c1174037ee5bfdec7a474d7c5c402e3b | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11-07-2024 07:30

Sharing

Report Analysis Logs

General

Target

蓝舰网络个人主页程序/3804/admin_add.asp
Size

1KB
MD5

a1886335c7c9a593ee30cdf8a2101207
SHA1

3f256fba593c2ef939ef9f3c3ede7dca13d8d9fb
SHA256

aea5de41bc15a94f668dfa7a0afb157edb79735f6f6d1df42e802c951d450443
SHA512

b76974956d0a5684e827f35ae3af434e8ae8c773c9e297b79b9c86b6422f73ed07b038fcd190531f46acc181f3eca303d3098be8797b1131a63ddcf06deeee89

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\蓝舰网络个人主页程序\3804\admin_add.asp
1⤵
PID:2676

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2676-21-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download