Analysis
-
max time kernel
42s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
30-09-2022 09:24
General
-
Target
woocommerce-smart-coupons/includes/class-wc-sc-apply-before-tax.ps1
-
Size
24KB
-
MD5
d90d08faaea4e72dfdd2976c0597d9a0
-
SHA1
35cf1b356cf3b8a9e9c7d608b73e301954dce2a6
-
SHA256
fadc81cf506f267ab7450a5d87fdb8de32642169267d9a5344997719cb7f6c01
-
SHA512
b00c1790c90834b0d151f87b31379e0c395e350d999840763ffcab6f68a5178706bb6dc8e18d34d46107185a00e0d9ae23135d08f117b31aebcbe56338c9eb7c
-
SSDEEP
384:tlewsF4FhF5D1+/xGkUdtw2QoiRKfrwLlybnABpn9K9YPgdnvE3jxdcq1TqzjJPH:tlexsz5D1L2ArepsnsldDM6KlEy
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\woocommerce-smart-coupons\includes\class-wc-sc-apply-before-tax.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
12KB
-
Filesize
11.4MB
-
Filesize
124KB
-
Filesize
12KB