04d341d7ccad9b73091abff394b580c214c842f798df29dc4727f3186ce3cb2f | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
23/07/2024, 20:06

Sharing

Report Analysis Logs

General

Target

程序包/Admin/Balance/PayList.asp
Size

5KB
MD5

2374e9aa95dfa8cee37d04a879048ec1
SHA1

d75e5f3ef9cca63812c4fecab93e5d5aa37341be
SHA256

77616109dd6aed11bbd7e947d03855d4513099f6ac96ca71c37cdb1916287437
SHA512

9248dbe78ce2c85f52916e93a0634fecb81715275cf6b4007849224e769861fb2f1cfc37365a235253ce8a4d0909185ab15bc6cc7bfb9c04914c64fd1d1b0b88
SSDEEP

96:8rhz+6USUbablbkZsk+dTsvT98MWgTLvHiHJ/mvFv9vFvKZ6TMcuaLO/BYnV97V2:Whz+LbaxwZu6JsZVBCBpTUn2cM4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\程序包\Admin\Balance\PayList.asp
1⤵
PID:2112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2112-21-0x0000000002370000-0x0000000002371000-memory.dmp

Filesize
4KB

Download