ed1b77da46139bfd70457fa40b142534191833a6dacd9276f0dfb5f15241c0c6 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
17/08/2024, 00:10

Sharing

Report Analysis Logs

General

Target

武汉蒙里来保洁有限公司网站/Admin_ArticleComment.asp
Size

21KB
MD5

0fc68fc63f021c6e896751ba513c7f66
SHA1

85baf756d72231ce665b1be04412b4f2635cfc15
SHA256

880fb68ad1c5966fae0c6501552a2aea183727d2e2dc3f962df41b8858d81234
SHA512

a4e63939c3f6b3cdfc407cc89f52df090e7a462233d3e7ce329bd49fe73262db17d8e52906ed4e7c5d0b32ded82eaa320ec8c1e8db79bcd593041d59423581ef
SSDEEP

384:YDgKrlNb39a0SObxvWF+lf3gtWwDbGlGnd9QlC0WDbGBUdaJ9dDAXLAsfqDWHVdz:igKhNbV5bxvWF+lf3tObEIbGB0aJnUXl

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\武汉蒙里来保洁有限公司网站\Admin_ArticleComment.asp
1⤵
PID:2812

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2812-21-0x0000000000480000-0x0000000000481000-memory.dmp

Filesize
4KB

Download