Analysis
-
max time kernel
130s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
31-05-2022 03:11
General
-
Target
Loki 1.8/Panel/inc/class/pCharts/class/pPie.class.ps1
-
Size
65KB
-
MD5
4a8df9c68451a7846fbbfb5213c450d8
-
SHA1
768de54634a27f2899887630427aea84bdd87bfc
-
SHA256
a84369ce6edeaef275e6973227e6212df23234e9c4649e73354b9b247559a13d
-
SHA512
ecf9a4d38dd3c18db9b48e872a5289fea5d648bd53a335322cac2015a57083d3e2fdd4213c197904cbf0af61a160a58d0317c7f72a03e93dc7d5257870fab9b3
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\Loki 1.8\Panel\inc\class\pCharts\class\pPie.class.ps1"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3520-130-0x0000020AF7390000-0x0000020AF73B2000-memory.dmpFilesize
136KB
-
memory/3520-131-0x00007FF9F8710000-0x00007FF9F91D1000-memory.dmpFilesize
10.8MB
-
memory/3520-132-0x00007FF9F8710000-0x00007FF9F91D1000-memory.dmpFilesize
10.8MB