6b69ad6dafcb1915eebecd5102d0657203755a660acea30e28b12027dafc384f | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14-09-2024 17:10

Sharing

Report Analysis Logs

General

Target

无忧传奇私服发布系统 v4.0/ads/conn.asp
Size

59B
MD5

a5b424d6298b56ab39b4fdb40ea11488
SHA1

7f856651231bcf52b00363020b121b521dac709d
SHA256

fe04365f76c01dbb361d660654145c4320585e8fc9ce93ac1efa69b546b7b226
SHA512

2b6c9a11abeaed0e85a7fcb0e069b897097ff8e83ed08ddf45092dd4b3d33b650d8f7e56afece01d2af7529896aa0fabad1f4257f2ff53d7066c2cb91e92d7e0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\无忧传奇私服发布系统 v4.0\ads\conn.asp"
1⤵
PID:2992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2992-21-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download