f8097e678a9c9539e96be5b8d21c493f335f7458baca6e480685efbe55666791 | Triage

Analysis

max time kernel
14s
max time network
18s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 05:13

Sharing

Report Analysis Logs

General

Target

北回归线2005精美全站/admin/link.asp
Size

4KB
MD5

0246772044e787e7c3979d443cdbb5c3
SHA1

5ba65b9462a75d944a96ab20ad04416ed090d661
SHA256

40f989e6be8af21aca7ec73a654696a95a05e99b8a33d9ebae6f7a26702e3c94
SHA512

b05b6a20d29b443470c57b4e844814bc4c4bf812c5b5358a73b87f49b47959234870916460cacc60ea803277e74bc8ec02643bd45e3cc7354d173156dfdfc36f
SSDEEP

96:+e0Opc9eeIAgT/cD4w5BzTmc04wK3WdddJdddc0LLkBy:+pOpc8eIzT0t51TzyK3t0LLIy

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\北回归线2005精美全站\admin\link.asp
1⤵
PID:2908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2908-21-0x00000000024B0000-0x00000000024B1000-memory.dmp

Filesize
4KB

Download