Backdoor web shell deployed on application server
🛡️ ProPera Intelligence background analysis - no action needed to view
⏳
Correlating behaviour, intelligence and relationships…Details
Incident IDINC-01006 (1006)
Created2026-08-09 20:07 UTC
Last updated2026-08-09 22:07 UTC
Assigned tosoc
Tagsweb-shell
SourceDemo
Alerts1
Devices & Users
Devicescorp-srv-app02
Usersiis_apppool
DeterminationMalware
MITRE ATT&CK Techniques
T1505.003
High
Alerts in this incident 1
| Alert | Severity | Status | Category | Device | User | MITRE |
|---|---|---|---|---|---|---|
| Suspicious ASPX file written to web root | High | Resolved | WebShell | corp-srv-app02 | iis_apppool | T1505.003 |
Evidence timeline
20:07:49 UTC · File
Web shell deployed
C:\inetpub\wwwroot\cmd.aspx
Comments & updates
💬
No comments yet.Update incident
