aa1da334fc56ebeb5f89a68edb3f061a83125fa83c47dc92947d1f6c9fc0058b | Triage

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 22:47

Sharing

Report Analysis Logs

General

Target

海天在线.Net论坛系统 v1.0 正式版/admin_config.asp
Size

7KB
MD5

f39cec9ff7686a14aa8a789d4b31ea27
SHA1

9a7a9992efdb2a4e07a2615798b26f8e56b41c86
SHA256

c0a26d8657d3959734fe58fc3f2e9bf3ce7ad00feedd752be05859945892e0c8
SHA512

032e26c82d3747b4138f66c9e8c8d2ec00655c0aa14a66470d25d4cb6a5517470d2d4ca9ce9efa08eb68831775816fb011349485e8f0dd21cbdd9e4594e193db
SSDEEP

192:r0ieq7zDgcXktkyE5Lk6DhjhbhZh0gLhzJhZWhxQhY6WhkhrhlRh/huhygJVhC1w:r09QscXkfE5Lk6DhjhbhZhZhzJhZWhxh

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\海天在线.Net论坛系统 v1.0 正式版\admin_config.asp"
1⤵
PID:1672

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1672-21-0x00000000025B0000-0x00000000025B1000-memory.dmp

Filesize
4KB

Download