33bae973bd3ef811df7a4b9398cf0f5ceffbac6e0c60e7c72c3e47efa5afd8b0 | Triage

Analysis

max time kernel
13s
max time network
20s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21-09-2024 07:02

Sharing

Report Analysis Logs

General

Target

qblog/QblogPub/Article/Default.asp
Size

2KB
MD5

c32b778a6a8f56ec53e878360a8c54dc
SHA1

0e68ec7ea5e5bea73358d5d717a862cf15b7bffd
SHA256

4ac983d26efa9cfbfe162ec1c7577e3d52a6fa4f7e01043823f1b36b3dff449d
SHA512

6e14c04489e835d2cc77b3548e383bb4408093911d2c6f7a9d213e17d3282b4997e23322deebaab2e924411a9b1b741a8d0ac738fe4ed5173d809e5935173c1d

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\qblog\QblogPub\Article\Default.asp
1⤵
PID:1956

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1956-21-0x0000000002010000-0x0000000002011000-memory.dmp

Filesize
4KB

Download