aa1da334fc56ebeb5f89a68edb3f061a83125fa83c47dc92947d1f6c9fc0058b | Triage

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 22:47 UTC

Sharing

Report Analysis Logs

General

Target

海天在线.Net论坛系统 v1.0 正式版/admin_Database.asp
Size

653B
MD5

acad81201d57488bfad0e85b24f0337c
SHA1

0f65ddc0987e9198ccf365646f2114e63003235f
SHA256

b7301654ce1c837f4ee797b403a01a6137d70612c126fc68884f14383c2694dd
SHA512

da452cc5e37e89f96c63255a5c4212540e52e7b3f6216b13964c7cd810c5417da51203e99ceb4475e8252f6c1777753cf1d301ce0a6c21d76b33db42e0eb60b1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\海天在线.Net论坛系统 v1.0 正式版\admin_Database.asp"
1⤵
PID:2720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2720-21-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download