aa1da334fc56ebeb5f89a68edb3f061a83125fa83c47dc92947d1f6c9fc0058b | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 22:47

Sharing

Report Analysis Logs

General

Target

海天在线.Net论坛系统 v1.0 正式版/_bottom.asp
Size

1KB
MD5

325c24ef398cfb50d39b466d7f13b0e1
SHA1

df93aac2b03ec05181b4be3d2c921b8fe52c0c3e
SHA256

e4a4ee5af5fdd7ac7849e4e577f5bd90b0f49890620daa107044c265bbb5b0ac
SHA512

5cb958f45219b254d1ebe34a0796bbdc80ee2372d6d4e7d36d58c41ff588861aa2066a5ac394e52d9f3b35d6a85a30ac83154c3a5b79e74a56cbdbcfe1f8252a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\海天在线.Net论坛系统 v1.0 正式版\_bottom.asp"
1⤵
PID:580

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/580-21-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download