4a93a6c73d6254afbc307db070c1635fdb8a561fc0d8e07918c8e70f1070a785 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15-07-2024 16:16

Sharing

Report Analysis Logs

General

Target

露天小说连载系统 v2.5/admin_appshow.asp
Size

3KB
MD5

9c22cc2bb74ddaf59e66cf84a9942c11
SHA1

b106b5cd1cbd7395d7aea2fee9ea46cd39d491bf
SHA256

3a7cb0ae80fb0a15d3d4ea5c0401eb635e6952bb7be3f8a04c5dddcf5e6aace6
SHA512

35aa40becc0446d992f3cbafda925a1dd1e92f01f5da08120b643f63c581c4acd509e877119ead5fdb9bdaa181ec1073c034834861132824e122e0fce36dc3d3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\露天小说连载系统 v2.5\admin_appshow.asp"
1⤵
PID:1636

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1636-21-0x0000000002440000-0x0000000002441000-memory.dmp

Filesize
4KB

Download