33bae973bd3ef811df7a4b9398cf0f5ceffbac6e0c60e7c72c3e47efa5afd8b0 | Triage

Analysis

max time kernel
63s
max time network
18s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
21/09/2024, 07:02

Sharing

Report Analysis Logs

General

Target

qblog/QblogPub/Audio/Asx.asp
Size

99B
MD5

987c90d1abba80dfe45a1647d566e9c4
SHA1

78b5d35579d18930a2850f17bbbd23fb86a6ae49
SHA256

509cdefc5dea727f5831b6f44d0de6e92c0717dc95a3801acc9e6027f4cf1869
SHA512

eb20ff0066aa271ddfc6963bede9222f2b656537ae43222392188d7ed18344d110b4622320cc33a3f42b2f38a86200dd93ddb38a13b28455df1f56a3ed0bb24b

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\qblog\QblogPub\Audio\Asx.asp
1⤵
PID:1464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1464-21-0x00000000023F0000-0x00000000023F1000-memory.dmp

Filesize
4KB

Download