Analysis
-
max time kernel
43s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
03-06-2022 13:29
General
-
Target
1236.ps1
-
Size
177KB
-
MD5
0336381c76595f013baed58abebec38c
-
SHA1
46b35dc1fe0eca4dc45b35db87d5f6220456df17
-
SHA256
90f7051bb59f9ee7dbfee8a1fc9882dbba383fbe1e647eff0466830d2ce71ce2
-
SHA512
d6a3c890d9d6981b8b001b747b1b9b319a4d34e293eaf4d8a9f10b16b5a2af0d94c01fff3b532aa90200561957d2386f89c32eafed4613dda005bc2a6923c7f6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\1236.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
14.9MB
-
Filesize
10.1MB
-
Filesize
712KB
-
Filesize
12KB
-
Filesize
11.4MB
-
Filesize
420KB
-
Filesize
200KB
-
Filesize
680KB
-
Filesize
916KB
-
Filesize
2.1MB
-
Filesize
1.1MB
-
Filesize
248KB
-
Filesize
6.6MB
-
Filesize
1.4MB
-
Filesize
1.6MB
-
Filesize
8.3MB
-
Filesize
124KB
-
Filesize
3.2MB
-
Filesize
14.9MB
-
Filesize
10.1MB
-
Filesize
12KB
-
Filesize
11.4MB