Analysis
-
max time kernel
89s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
31-05-2022 03:11
General
-
Target
Loki 1.8/Panel/inc/class/pCharts/class/pRadar.class.ps1
-
Size
33KB
-
MD5
164be607d90ef2cd65685a9a56162631
-
SHA1
da52bc88e278f1b9e0f2f7584e1b76bc24875e5d
-
SHA256
05b4befdb507843d814dd4d9d84747f2ae2a669432ecf07b7cfec71f23ea4bb5
-
SHA512
9b8d20509309b8dd865abfb47528c2bbbbc6e22ff7d31db24c3f4a4243ccafcf418d915c4cb1d8a9241142d4fbdf9da03683c24de9daad0c42f4b8bc2c94c075
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\Loki 1.8\Panel\inc\class\pCharts\class\pRadar.class.ps1"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2708-130-0x000001DB1CF50000-0x000001DB1CF72000-memory.dmpFilesize
136KB
-
memory/2708-131-0x00007FF9AD4E0000-0x00007FF9ADFA1000-memory.dmpFilesize
10.8MB
-
memory/2708-132-0x00007FF9AD4E0000-0x00007FF9ADFA1000-memory.dmpFilesize
10.8MB