04d341d7ccad9b73091abff394b580c214c842f798df29dc4727f3186ce3cb2f | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 20:06

Sharing

Report Analysis Logs

General

Target

程序包/Admin/Book/BookApply.asp
Size

3KB
MD5

aa7434c830d7761d2969a797703a9d1e
SHA1

54a9048fc119c5d5765c4eaba9de13c539eb1280
SHA256

544731cda0dc37dad2e76bca2261957283a465be79f2564b98fb3ad2626093e6
SHA512

faa9dbfe87fccee529ddb967a4795b6ea03f19b99624ad34f52d34d2b4c0ae6dab12f8711278920974965375d9ec41d181892d3c273e9da66d08b2520ba41333

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\程序包\Admin\Book\BookApply.asp
1⤵
PID:2340

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2340-21-0x00000000005B0000-0x00000000005B1000-memory.dmp

Filesize
4KB

Download