f8097e678a9c9539e96be5b8d21c493f335f7458baca6e480685efbe55666791 | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 05:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

北回归线2005精美全站/admin/news_show.asp
Size

1KB
MD5

65b2bcbca2f441649839b5c8cf5c91bd
SHA1

9e0ea60694b28dfa3e0e12dca8be0a8e0632bb54
SHA256

2b48f5274e6ad6246f43eb4db26b1374e7b5499497597f316b8e8e644e2cbdfa
SHA512

4a7e3910f2c64ee1c70b6d70a009cacacf608ea0d978e4b1ba80ca3394c7b94308925680d0173f54b0c4d96e94dca903eaeda5296c4d3604e6e4dee5f4124a62

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\北回归线2005精美全站\admin\news_show.asp
1⤵
PID:2872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2872-21-0x0000000002380000-0x0000000002381000-memory.dmp

Filesize
4KB

Download