006ef6e30f0a53837985c3bd71e7155a6819f4da5f59b813a3f86fbafcf6b9d1 | Triage

Analysis

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
10/08/2024, 18:24

Sharing

Report Analysis Logs

General

Target

无郁社区/bbs/RecoverPasswd.asp
Size

2KB
MD5

458b4005e7c35cd1c608e48f08b36536
SHA1

c7c1084975186d153e1f40204cede9940e895b31
SHA256

9d3b715ce704b37cd08d4d635e7dc69b91fb246c3d7267dd112c9b4dec00de0f
SHA512

e776bfcc12d250e64f45e1eae6f1a10d1d5dbedf7ed3207f2d1a7c9d50865f3713a0d0b3d976b073f563e2263d2eb24d9210f9f44c3a7bc3428f0f5f7f8c6ae0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\无郁社区\bbs\RecoverPasswd.asp
1⤵
PID:2780

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2780-21-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download