27b246a1030828879a9fd69d0f14e5d4dcb92cf63d3b0311e89b8f7c52b385f8 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 10:05

Sharing

Report Analysis Logs

General

Target

RESCN.NET全站系统/DataForm1.asp
Size

2KB
MD5

488b7af98f3c82897c9a488971da7d2f
SHA1

02133da4b7263418ec3b5a696f8efdda92f942f6
SHA256

e60def8cacb425770ce6a2c071d320898f1039fbb2215b25abb775d1f8c629ef
SHA512

00cd375317f19466c9cbaa9994cf2e78f0fe7f136cf5d122eec265eb89dbfe772c8e25e62b93300113df8d193765da442c5574fbcdf8eff164a9f8eadfe5cdfb

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\RESCN.NET全站系统\DataForm1.asp
1⤵
PID:996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/996-21-0x00000000003B0000-0x00000000003B1000-memory.dmp

Filesize
4KB

Download