176aa163ee317ab39a613117b7d66a391e6d56af9e92697cd01a486c2261a27f | Triage

Analysis

max time kernel
79s
max time network
18s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19-09-2024 06:53

Sharing

Report Analysis Logs

General

Target

091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_bqsm.asp
Size

1KB
MD5

a8c206f02aebfb3607063cbea6218f01
SHA1

4b70edb7e91701abfcf50a26024680ccb099ea5a
SHA256

3ea7bbf1a7af5e3f13afbc2411eeeed4920d07fae1573bd893525a5dc3d133ef
SHA512

f2e6757736551fcc489feb33eef1d3033c3eef269cd5a16d4d704906676e1b9b02a62ee84a4c16b54adbdc5d3dcc9588ea781f716435cd953d5a25ecf2f028db

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\091_cc_lady2011_free_v4.3.6\cfss_admin\fjqq_bqsm.asp
1⤵
PID:320

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/320-21-0x0000000000400000-0x0000000000401000-memory.dmp

Filesize
4KB

Download