Analysis
-
max time kernel
1561s -
max time network
1567s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
21-02-2022 17:38
General
-
Target
Microsofd.ps1
-
Size
441KB
-
MD5
9e3b4a2ed171ea1c888d569c7d98b944
-
SHA1
9f4b88c179ab1485f94bc13551d33aca4d80e18a
-
SHA256
fa74335c09c138eab6256c1fbb176aee9a8334aac65cff3bf9b602d9dc9dd554
-
SHA512
eac8f04457080f2ed89df83a76b3855a3a7864a0c3f85f59f4c2b871660b319028a934936e09c7269b829582dfc396b16031de359fffa911bb73b7fd2e48f028
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\Microsofd.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
11.4MB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
12KB
-
Filesize
3.0MB
-
Filesize
124KB
-
Filesize
8KB