Analysis
-
max time kernel
41s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
15-10-2022 13:42
General
-
Target
wp-asset-clean-up-pro/classes/BulkChanges.ps1
-
Size
13KB
-
MD5
7a51835aea576fd31d97ff49b7e247d5
-
SHA1
e2f574453421c604b975a11b03e64ecc017e62f6
-
SHA256
f128457b6fb731907fb8db8ffa6246cdd10918e4fa90e64614b5b7d57e475002
-
SHA512
eb6efdd105fe22620ee074ca85ac036346e86e5b7e365b1dda6cb28d2ed04ee04ef4348fb4ded7619a5cc9aeadf238600663ad4c83d026acc14d4c4f1e0cc7b8
-
SSDEEP
384:b3Ya94Dn6XM8FnEr3525cuvUNr0GeDjsutgr:b3Ya94r6XM8FnErp2hUp0DDjsutgr
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\wp-asset-clean-up-pro\classes\BulkChanges.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
12KB
-
Filesize
3.0MB
-
Filesize
12KB
-
Filesize
124KB