4a93a6c73d6254afbc307db070c1635fdb8a561fc0d8e07918c8e70f1070a785 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 16:16

Sharing

Report Analysis Logs

General

Target

露天小说连载系统 v2.5/CHECK.asp
Size

2KB
MD5

3676b36062a1aa89bf7277f892806fbf
SHA1

d079e5145791e06a568ebec00e7f5bc1eb1b9aa4
SHA256

9432f4bc97f5a7b9f15d3da8737a8398bd20eecdbf1991ad5c4ceb14357bc896
SHA512

2e43560b4d70db462c128657527c78fad69f82dca8963d5e0b3664a928de74806d446e11b681b816339606dd79c520a89e42991f82beff4cbb88a0980e90291d

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\露天小说连载系统 v2.5\CHECK.asp"
1⤵
PID:2584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2584-21-0x0000000002440000-0x0000000002441000-memory.dmp

Filesize
4KB

Download