a09cf5f48c0bb6d7849274363697f9044656dedb1b17db5046d565374b6e1117 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
02-08-2024 04:16

Sharing

Report Analysis Logs

General

Target

webv5/admin/form.asp
Size

4KB
MD5

7e449cf5fb2a9df801302ef27eab81c8
SHA1

746980c994b2b389d0796a561e44d3e319bba3a9
SHA256

7585c544f4128915de2c99997a04186a1fb2b7c0d39838badd11cc9c374c3736
SHA512

a07ec2a95c27bb7e74d487cc36aeb6738883c225452bf6c1bfe9046c80945db10e39f6b117f1c707f810c1a6b1fc21f964273b4df39d44b2da7ea769f23ecd27
SSDEEP

48:1xbFsuJh0Ck8CfPSEVNc9XNd+WmlYsSe3bdwgVGG98xsSRpROjCXgpzVaxaWuyHh:Fh9WPV+9fStrj3987RzjaVaPfHhbvD

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\webv5\admin\form.asp
1⤵
PID:2484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2484-21-0x0000000000440000-0x0000000000441000-memory.dmp

Filesize
4KB

Download