35a0580a6d54ad16a2b7139f281d2802aa565b762a7338c0e053d8a78f4416e3 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 03:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

川川免费吧/admin/adduser.asp
Size

2KB
MD5

67d6cb3c0bc14d731201ad82e44a45a1
SHA1

c57409a61733c86b7d4e92b6f14a742f65ecd9ef
SHA256

6f1ee056ca6ebfa34db2ebecb30fec2b10b1aa66291ec1b1227efb90ca43b32a
SHA512

acfdaeb46707956991acf8ceae77c9bc85e908992e2170220e6cb299f740d1f23bd8323cb6145e15ae37f2ae1d31de96cfc4c355dac67b32a9f547f9dac1782f

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\川川免费吧\admin\adduser.asp
1⤵
PID:2232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2232-21-0x0000000002470000-0x0000000002471000-memory.dmp

Filesize
4KB

Download