e81066a4011bdf89e4b63691a65cd646b0c53432ccd18ec1041edf8a740d1b16 | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
13/09/2024, 02:15

Sharing

Report Analysis Logs

General

Target

凹丫丫免费新闻系统4.8.1ACC版/Comment.asp
Size

4KB
MD5

8043820e6166a4d79f35af5c9caa8dea
SHA1

43acd965d930c5a52c5c3bb70a1e9de8a86da7c0
SHA256

98b44fe3c6e8dfa29a335a753a5b2be92eb4c8bbb4c9cd3ba54dfd3e6459128b
SHA512

efe4140d7c50da3b307a58d8e4704f3f5117f2df71df917987767aaeb21a89f87d9051f52eceeb6e578fc5ff1647365a7cbcd4511101b207a7e3326b654380b7
SSDEEP

96:DSIg7V0RkCVKBUJbn76YocMpehNbGpdtNmuC:+IQ2dPbn4cMpehld

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\凹丫丫免费新闻系统4.8.1ACC版\Comment.asp
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2280-21-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download