Analysis
-
max time kernel
45s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
28/10/2022, 15:27
General
-
Target
wp-all-import-pro/actions/wp_ajax_get_bundle_post_type.ps1
-
Size
5KB
-
MD5
888221b37420b21e890a54c1b6ed01ce
-
SHA1
9fe80f58fe6627ccd72f075810e8611371193ea3
-
SHA256
479ff8515dbdeff404de41487adc2f01c92ee7b86e3fb8e341417f1fd226bb47
-
SHA512
4628b29ef93a9fc7693c1fd708566008f294c25b68f4e2ceab11fe67d3b87ac1d44ab85f275cee2edd583029b711fe5fba12a71d452534e41b4863595104224e
-
SSDEEP
96:ajLQsd3cupsd3vE6YFt1w1RtEMIao+4gMwqivFC2HOY5xn:UqtJsFt1w1RtEMVo+4kvtOYT
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\wp-all-import-pro\actions\wp_ajax_get_bundle_post_type.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
12KB
-
Filesize
3.0MB
-
Filesize
124KB
-
Filesize
12KB