a09cf5f48c0bb6d7849274363697f9044656dedb1b17db5046d565374b6e1117 | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
02/08/2024, 04:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

webv5/admin/exit.asp
Size

105B
MD5

d5f96919c35e7ae32405db90d2b0651d
SHA1

bc32c32564fd640e9605ad3e62436f27e27f62e4
SHA256

5e6bd72c1c3aec8bc074078e449cce21f799660b9693c85fe1dc47568b75c331
SHA512

58268953c88012afe6f6ed729d3fc0da524d547749ff091a54271d9e3bbf91a23f4ed13a8a163dbb062448a842488d256fdcc5ec007908e42930cfc305a076cd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\webv5\admin\exit.asp
1⤵
PID:900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/900-25-0x00000000022A0000-0x00000000022A1000-memory.dmp

Filesize
4KB

Download