0d19c5f288ff3516ba413b23ade0bb31e3b6fb97afaf298d30014f2042efcf85 | Triage

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14/09/2024, 23:57

Sharing

Report Analysis Logs

General

Target

admin/admin_check.asp
Size

519B
MD5

6877cc4c98366e571e49438266aa6fda
SHA1

eafb45f01df20fd8e6e5c30a49bf40830fb0bcf7
SHA256

9c08f3a88136ea338ed0d87dd50a85e2a641b5227e91d6eb2616cacd2450fb25
SHA512

33a3e8fd64fb2f3d4f122a5de2e5106254bde2a518fd43ad8c2d60533b61b4ec146c679618931d9bc91a9a9e1444f4c6100b868d1d240dd0b77870cfe7f9ac46

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\admin\admin_check.asp
1⤵
PID:2440

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2440-21-0x0000000001F00000-0x0000000001F01000-memory.dmp

Filesize
4KB

Download