04d341d7ccad9b73091abff394b580c214c842f798df29dc4727f3186ce3cb2f | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 20:06

Sharing

Report Analysis Logs

General

Target

程序包/Admin/Book/BookReCommClass.asp
Size

8KB
MD5

4e007f6c010bd824a7c65892065c5ad4
SHA1

a974ee5a9d48fe40754b03b6985515cee441a52d
SHA256

d39805b2c6408a2a0b39adc5d2b23f4dca0c2321167a0b514761a3ce95d42d8b
SHA512

6716a74311f778af4ad41b45d6f58f86863567da3dfa5e909425773e9fef69ec7aee57ca9085caa227565ed71743c215eab96877d9a2902ed388281106e40d45
SSDEEP

192:WSSz+LbaKZukfVZWetwoZZnBCB5q+x3SA:pi

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\程序包\Admin\Book\BookReCommClass.asp
1⤵
PID:2488

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2488-21-0x00000000023B0000-0x00000000023B1000-memory.dmp

Filesize
4KB

Download