21c96d448ad302f685a588da42e64ce5857bb02487de4df4891bc1abab7aca33 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23/08/2024, 11:03

Sharing

Report Analysis Logs

General

Target

dj/163/Admincopy.asp
Size

1KB
MD5

0f54c2b05168b464845b8e3676ff1270
SHA1

8da0f360234e604f9f2d84cee5dedfa8704b21e5
SHA256

291eed05e24ac37987bbbfb515e27bfc0ad8fbece590c9908cec07cf60d1a64e
SHA512

a960ad3a1865440028ea6f8cfcb1d833c7d0b7a0416fb2ea8c98d386e1c870e8bba81db695cf36016631cd7fcb29193373c2ce4132c3e518a8f041f3c723d455

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\dj\163\Admincopy.asp
1⤵
PID:2104

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2104-21-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download