Overview
overview
10Static
static
107.32...nt.ps1
windows7-x64
17.32...nt.ps1
windows10-2004-x64
17.32...ew.ps1
windows7-x64
17.32...ew.ps1
windows10-2004-x64
17.32...up.ps1
windows7-x64
17.32...up.ps1
windows10-2004-x64
17.32...he.ps1
windows7-x64
17.32...he.ps1
windows10-2004-x64
17.32...tm.ps1
windows7-x64
17.32...tm.ps1
windows10-2004-x64
17.32...ge.ps1
windows7-x64
17.32...ge.ps1
windows10-2004-x64
17.32...og.ps1
windows7-x64
17.32...og.ps1
windows10-2004-x64
17.32...te.ps1
windows7-x64
17.32...te.ps1
windows10-2004-x64
17.32...lp.ps1
windows7-x64
17.32...lp.ps1
windows10-2004-x64
17.32...x.html
windows7-x64
17.32...x.html
windows10-2004-x64
17.32...ch.ps1
windows7-x64
17.32...ch.ps1
windows10-2004-x64
17.32...el.ps1
windows7-x64
17.32...el.ps1
windows10-2004-x64
17.32...et.ps1
windows7-x64
17.32...et.ps1
windows10-2004-x64
17.32...ce.ps1
windows7-x64
17.32...ce.ps1
windows10-2004-x64
17.32...ze.ps1
windows7-x64
17.32...ze.ps1
windows10-2004-x64
17.32...ck.ps1
windows7-x64
17.32...ck.ps1
windows10-2004-x64
1Analysis
-
max time kernel
42s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
28-10-2022 23:55
Static task
static1
Behavioral task
behavioral1
Sample
7.32ֻ̨ģ/admin/announcement.ps1
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7.32ֻ̨ģ/admin/announcement.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
7.32ֻ̨ģ/admin/attachrenew.ps1
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
7.32ֻ̨ģ/admin/attachrenew.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
7.32ֻ̨ģ/admin/bakup.ps1
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
7.32ֻ̨ģ/admin/bakup.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
7.32ֻ̨ģ/admin/cache.ps1
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
7.32ֻ̨ģ/admin/cache.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
7.32ֻ̨ģ/admin/creathtm.ps1
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
7.32ֻ̨ģ/admin/creathtm.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
7.32ֻ̨ģ/admin/creditchange.ps1
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
7.32ֻ̨ģ/admin/creditchange.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
7.32ֻ̨ģ/admin/creditlog.ps1
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
7.32ֻ̨ģ/admin/creditlog.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
7.32ֻ̨ģ/admin/datastate.ps1
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
7.32ֻ̨ģ/admin/datastate.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
7.32ֻ̨ģ/admin/help.ps1
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
7.32ֻ̨ģ/admin/help.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
7.32ֻ̨ģ/admin/index.html
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
7.32ֻ̨ģ/admin/index.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
7.32ֻ̨ģ/admin/ipsearch.ps1
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
7.32ֻ̨ģ/admin/ipsearch.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
7.32ֻ̨ģ/admin/level.ps1
Resource
win7-20220901-en
Behavioral task
behavioral24
Sample
7.32ֻ̨ģ/admin/level.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
7.32ֻ̨ģ/admin/modeset.ps1
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
7.32ֻ̨ģ/admin/modeset.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral27
Sample
7.32ֻ̨ģ/admin/notice.ps1
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
7.32ֻ̨ģ/admin/notice.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
7.32ֻ̨ģ/admin/optimize.ps1
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
7.32ֻ̨ģ/admin/optimize.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
7.32ֻ̨ģ/admin/postcheck.ps1
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
7.32ֻ̨ģ/admin/postcheck.ps1
Resource
win10v2004-20220812-en
General
-
Target
7.32ֻ̨ģ/admin/datastate.ps1
-
Size
7KB
-
MD5
ffcabc04752e55c425676a82acd6ab5a
-
SHA1
70c954ce2c74ef4cf8b257e385a6401b5f119c09
-
SHA256
5288c6f9c06480bda3a2bfa685df56e125dd3dc3e4c93b66965c8d8632d50c7f
-
SHA512
f7cc20321c1010a1c7318379ba613f3bf64ce0ba4af4c9cad959be67e1def828a805ccbb8971c6b2be9b5ff2a45083dc911f7f242afa05654030f828e7c9b1e7
-
SSDEEP
96:COj7D/AqDGnIsh95O7STSZXs95QJzgQcQBAQkQQKds8gQp4kAcaySxIFQruSa+kC:COj7kIA87SkK+1qu9riAq96Hit
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
powershell.exepid process 1396 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
powershell.exedescription pid process Token: SeDebugPrivilege 1396 powershell.exe