6de22e2003a1395119dfd3d9f77f6eb803d3c7d9c4c155ff689f6204c4efefdc | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
15-09-2024 04:03

Sharing

Report Analysis Logs

General

Target

超能仓库进销存系统正式商业版/CHAT/ONLINE.asp
Size

1KB
MD5

e0036fbe296055b0d20c9a7317c7112f
SHA1

b3a144b57c3b107d10d5219b3ff9be3dbd6a5bfa
SHA256

575b86b1aa07ca416ca937b98bc86267cf581bb8f206bba62c4c9af08c4d6025
SHA512

2c4cdee76c38d68e4614a99402139caae5a3e62000e8ad95a56fd4bb4059c2cd9bf27f557370b9af2f160dc388e7a0f979a5d84a2f1a28ecb2be1241df33d301

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\超能仓库进销存系统正式商业版\CHAT\ONLINE.asp
1⤵
PID:2848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2848-21-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download