6de22e2003a1395119dfd3d9f77f6eb803d3c7d9c4c155ff689f6204c4efefdc | Triage

Analysis

max time kernel
118s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-09-2024 04:03

Sharing

Report Analysis Logs

General

Target

超能仓库进销存系统正式商业版/CHAT/SAY.asp
Size

11KB
MD5

0d7b576d6daa2d2d93a25a59d6a55fb4
SHA1

5f5876baa16ee9d32d7da323c6d104d966e900d4
SHA256

f9982ff45054ad2661d8b1a49cb272facfb8fc3312370c745060481ec3003278
SHA512

528ed816d30a58aa47a540b6aa92e80c11ec527e4cf22d513847006fa47c9a7c76659d9290e1acda24ba6d665fae5a5a7ceeaaf2123370df210386e0a3c75f51
SSDEEP

192:DWQYUdFRARfRcjlwhoGcLlePTSpoO7sfzx5NBnQI9z/zM4Kc:qhRcjUbc5wTSpoh5Nlz/wpc

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\超能仓库进销存系统正式商业版\CHAT\SAY.asp
1⤵
PID:2708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2708-21-0x0000000001FE0000-0x0000000001FE1000-memory.dmp

Filesize
4KB

Download