04d341d7ccad9b73091abff394b580c214c842f798df29dc4727f3186ce3cb2f | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 20:06

Sharing

Report Analysis Logs

General

Target

程序包/Admin/Balance/TicketType.asp
Size

4KB
MD5

97cc3759fa3b936f849168236284a9f3
SHA1

f6525e42582770e022163e32452150bcb0a0d215
SHA256

17d4cd38c9cf1513c55e3d117e5bfcb0da76959ada7e9ffbd2f60d5a2f702e17
SHA512

a042cfd97c33f1ad6ff836690aaf78b24a0983c631a0dee997c9bd81d0df6ca178994cff67a5bb1bbeaa19ae47d5d3ae244b22d23d57d085c02a7e787c8c7567
SSDEEP

96:8r5z+6USUbablNkZsk+dTsvT98M/azDrcZ6T1ICvSaBYnV97V7r7Tq2ko2kuUh4:W5z+Lbax2Zu6i3IZt+BCBpPT0W94

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\程序包\Admin\Balance\TicketType.asp
1⤵
PID:2020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-21-0x0000000000450000-0x0000000000451000-memory.dmp

Filesize
4KB

Download