b504094c8dc6cb84971f5fa0daa4da58896de607f7e462b471c56c509a9f39b2 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
12/08/2024, 01:55

Sharing

Report Analysis Logs

General

Target

夜圣DJ站程序 v3.8/57Data/liying#20.asp
Size

1.4MB
MD5

b0ae239c3a857b080a1582c48b855272
SHA1

9511e248c304e9527229b9834e8c184d54f31ece
SHA256

6dbea3494a9c2998c120096a4f1e87af0d11c95d4d49653c3aebe8d626113cd0
SHA512

972328ba360b02d54a3ad172e89dd3bdaa8221bf4532a64eddab41d61055ba541a303e187b3c8501c7617636ae59dde52e4775c206c78d163f8a86f7f51ca5cc
SSDEEP

24576:rLkQKLhzVjZSZjPzFMrxT8oxfm0mgliznDWUikcd1ov3MGRRgDRQqezn4rI5D:U2cr65D

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\夜圣DJ站程序 v3.8\57Data\liying#20.asp"
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1628-21-0x00000000024F0000-0x00000000024F1000-memory.dmp

Filesize
4KB

Download