04d341d7ccad9b73091abff394b580c214c842f798df29dc4727f3186ce3cb2f | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 20:06

Sharing

Report Analysis Logs

General

Target

程序包/Admin/Book/BookListVip.asp
Size

7KB
MD5

9a07821485e0522c152c96e99cf8bef4
SHA1

f3aac70d411718ccbbdc2535ac63ac2dcef14570
SHA256

852376db4e3947be59ef3725e5a732a9c6ab0b9ba37577ba05c2806c9ec68c09
SHA512

e83af35f2736175d3cb5032ee8f17ab4e662ffe783bbff43d71aa865f7d87dfb9ffdf2cd9afbe9f90e6f3a1ec62689d0fa70c46e90ac95dcdc370b1e029a6358
SSDEEP

192:Wpz+pCbaTZuKP4ZpSBCBp0eQFqCz54oO4:Hz4Q

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\程序包\Admin\Book\BookListVip.asp
1⤵
PID:2160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2160-21-0x00000000002D0000-0x00000000002D1000-memory.dmp

Filesize
4KB

Download