3b6e99df868fdda432c8dbfbc2420306605dac62fddd0337655b6ef680975c33 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
19/09/2024, 04:15

Sharing

Report Analysis Logs

General

Target

在一起在线文件管理器 v2.0/fsodb/fsodb.asp
Size

132KB
MD5

0cc63689e118e0e67286839ad215ad26
SHA1

e5bdfa1f1dccd366abd4248b398ecce5f55f5a92
SHA256

afb3622cb294d3904d58b06253445bf7d946044194c36426ac7866520dad6cf9
SHA512

9bd4278d20602b0108649c5698d97c4c2342f2a5e9eaa952222b84fefc0aaee4863e53e50c397be66632d76d8850dbf839a63e7737d65d2d886b2530c41102c5
SSDEEP

384:KxCHnZnh53nFAAGJlXayAJu0oTrK/T1o3q:KxaRWAG735q

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\在一起在线文件管理器 v2.0\fsodb\fsodb.asp"
1⤵
PID:1720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1720-21-0x0000000002440000-0x0000000002441000-memory.dmp

Filesize
4KB

Download