Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-en-20210920 -
submitted
18-10-2021 10:36
General
-
Target
92c492_959babd593ed4cd49dd3b6a0f1146d59.ps1
-
Size
355KB
-
MD5
20155e92f6a7a7763994226e11713552
-
SHA1
40924207e867cf348592997149b3c4c09218913b
-
SHA256
efe702eff8b1684d9a92b1a5f24e1f375033dd124e588ee30cc778adc16d76f1
-
SHA512
593cdb29c24e72818603dfbe367db4e85a6e5750309658cda0b3443b2b4a65188a51f83bac20089095cdd1400d032be1fa33937d52aeaaf468d53df834559191
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\92c492_959babd593ed4cd49dd3b6a0f1146d59.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
11.4MB
-
Filesize
12KB
-
Filesize
124KB