85cb2fc0c9a8c9fac21199cb7eb64694310835188b68aa48574280360c6d9de8 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06/09/2024, 04:39

Sharing

Report Analysis Logs

General

Target

allinc/inc_down.asp
Size

2KB
MD5

1e79be1ad3f926bdfc8766162e5c750e
SHA1

3bec6e0e0d37379088e88d84ed5308a09d1a9ec0
SHA256

4351c054a1ea446ce1b6111bc3c2868a763c11bb4257b2dc54c22a133132641d
SHA512

90129388dd500d26d206b072b0f4b231e8932c467373c394f5475c9626f0f362714c2164afbc94c827af945d936ea5e8d5be61c8ade52d3bf0038dbde76a7a80

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\allinc\inc_down.asp
1⤵
PID:1680

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1680-21-0x0000000000510000-0x0000000000511000-memory.dmp

Filesize
4KB

Download