6b69ad6dafcb1915eebecd5102d0657203755a660acea30e28b12027dafc384f | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14/09/2024, 17:10

Sharing

Report Analysis Logs

General

Target

无忧传奇私服发布系统 v4.0/ads/edit.asp
Size

9KB
MD5

8c7dc69882c16f0fed5ca8af8f29e3e1
SHA1

430c8679d8d345c27329df7315e16cbca732a4fe
SHA256

579aa35bd170396ce0a09d21f49814ad4172fc22d50082dde53a747d6aabdedd
SHA512

380761711f95ed604dd72baa36ab87b95689d50f08bf23a86538b90a0e7d6d4b2e61a0ea2b3efa91ca8a83a85f5ed2082e0917549e40134676f785f974c4e2f7
SSDEEP

192:rF4B3TCtUFHyHd2Wm5jGb5lb7ht54nTEID:Er2cmUYID

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\无忧传奇私服发布系统 v4.0\ads\edit.asp"
1⤵
PID:2688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2688-21-0x0000000002360000-0x0000000002361000-memory.dmp

Filesize
4KB

Download