a09cf5f48c0bb6d7849274363697f9044656dedb1b17db5046d565374b6e1117 | Triage

Analysis

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
02-08-2024 04:16

Sharing

Report Analysis Logs

General

Target

webv5/admin/adminfile.asp
Size

5KB
MD5

de9b186b3877057075b71ccac1cc4554
SHA1

088146d45950b9c30842b53ad232a839ed29fb10
SHA256

335d34a845a3a5a7d9ad0102e9856d634cfc21e7480f482d88fdd427ab38a053
SHA512

3177a50522506765e5a9fd2e72301a7e0ad68f255479dc29955e6832e288cb7fb61f8328615813dec3d54bb4e8000718dfaf15a6d2f74595d0efb6abc01f2f49
SSDEEP

96:j8khs7Ths78hs1hsY5hkNT8A1n1Oj1A1X1vSQXv3hetR6ViMn4chdvY2G18arOys:jJspsusHsYTkHRcj+pNPQtR6sMthdvYm

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\webv5\admin\adminfile.asp
1⤵
PID:908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/908-21-0x00000000001E0000-0x00000000001E1000-memory.dmp

Filesize
4KB

Download