Analysis
-
max time kernel
37s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
02-06-2022 20:53
General
-
Target
1204.ps1
-
Size
296KB
-
MD5
8a6d292fdd55ddb97fd2df336f66cfbb
-
SHA1
348401596d0b44faf930787380e146cb5f57795f
-
SHA256
bac3ed96090fb8ceed04adef4857bb8fd50b49ed65655f688e06d207f2daa3b8
-
SHA512
c0dd1b85b19a2f969e4ad9948ef195ba7e5246ce5b45eb27b17c98accf9daf1004b595d3fa0f753cb98ebceb2e5b1bed6b22a31abd69e1467d0b78b3b1374055
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\1204.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
14.9MB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
712KB
-
Filesize
11.4MB
-
Filesize
420KB
-
Filesize
200KB
-
Filesize
680KB
-
Filesize
916KB
-
Filesize
1.1MB
-
Filesize
248KB
-
Filesize
6.6MB
-
Filesize
1.4MB
-
Filesize
1.6MB
-
Filesize
124KB
-
Filesize
12KB
-
Filesize
3.2MB
-
Filesize
2.1MB
-
Filesize
8.3MB
-
Filesize
712KB
-
Filesize
14.9MB
-
Filesize
11.4MB
-
Filesize
1.1MB
-
Filesize
10.1MB
-
Filesize
420KB
-
Filesize
680KB
-
Filesize
124KB
-
Filesize
12KB
-
Filesize
2.1MB