006ef6e30f0a53837985c3bd71e7155a6819f4da5f59b813a3f86fbafcf6b9d1 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
10-08-2024 18:24

Sharing

Report Analysis Logs

General

Target

无郁社区/bbs/ForumTree.asp
Size

581B
MD5

ac6010a79e603585863ac45814253313
SHA1

699b0d46d9f946a7eaf8e42e31fb0d8a10785a65
SHA256

2a36f7834f2710cd7842b79787f35e580d6885b3dc34422a5ee0a90aeabb16de
SHA512

b1e2370255fd578b4c54843a6d5948d0c2074051585546c816544bf0e086a2529f8caf76205e086b3d66b91f66ed62f317a2b176464fb96ba6443029a90012be

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\无郁社区\bbs\ForumTree.asp
1⤵
PID:2224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2224-21-0x0000000000360000-0x0000000000361000-memory.dmp

Filesize
4KB

Download