4a93a6c73d6254afbc307db070c1635fdb8a561fc0d8e07918c8e70f1070a785 | Triage

Analysis

max time kernel
91s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15-07-2024 16:16

Sharing

Report Analysis Logs

General

Target

露天小说连载系统 v2.5/admin_ADMIN.asp
Size

3KB
MD5

87633e36be299953e02ab2fe45f55567
SHA1

c4340a7725b3eaf2c6dd77f4142d4023bd830943
SHA256

afa2279f23a4370e7d1b77b29e52e932d67275879bcfd30f99668cf8dbeb6a71
SHA512

1db8ea50a29dae4842bf4f2dce724e6a8e25519dc7c46d3f92c266013c89afafdf0d462d65d927b0ec75172ddd4e77cd4fc55a56fe1c4baf12c37a6eb9d16fcc

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\露天小说连载系统 v2.5\admin_ADMIN.asp"
1⤵
PID:3048

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads