e59dc5149c92283dddb8ba191d984d44f08379f97736b19fb0666927425d42be | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19-08-2024 14:54

Sharing

Report Analysis Logs

General

Target

upload/API/HiAPI/API_Response.asp
Size

11KB
MD5

e254c7424ec833ee944de7887cd484bc
SHA1

3a4cb1d2cd037ac0ae250f506cfc44ed5ab15466
SHA256

6d20a410cfa75c7fc4704ecd114c05e136daeca5a4229d5f1a184179b16c60e9
SHA512

26f7a3b44960b21ce794a79ec7f2a4f5a9becffa4262811ea2b222aa07e3a00e06569d11b64dc42826e882a14b830ede3c367931c3d7385d9c1c52cd52bf7985
SSDEEP

192:GjYwVENvJYCPCsOaNl4k9aGMC/0IQMvZBMDq2/gIsvEcIjC8yC89f8RC8WC8QC8Q:Gjlq9nBNRhBM7YIsvEPk9kfo2TR49AQT

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\upload\API\HiAPI\API_Response.asp
1⤵
PID:2172

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2172-21-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download