Analysis
-
max time kernel
43s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
23-11-2022 15:49
General
-
Target
e49621185d8bd94f46582510e905f7895fbcbb624437a33d83df06fe12eece4f.ps1
-
Size
156KB
-
MD5
729bb170ed2f1fb56fead30e2cf9d2a8
-
SHA1
42677460ee131ef8bce1f56307088bd1aa82bdf8
-
SHA256
e49621185d8bd94f46582510e905f7895fbcbb624437a33d83df06fe12eece4f
-
SHA512
04c5f2c1d18369fa5f80deec0bd85f7ecf26fa9b2b4192e3d3befefc77a9c7110b71d4f1855c68848c3ae254ba737e1963dbe6a543419be282dd0bf6bdb3c2d4
-
SSDEEP
3072:wcgciJNNL5ZQiGbkYKMz0GDN1hICbeb72rJhC35z:wcgckNl5ZQiGbkYKMz0GDN1hICbebeh2
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\e49621185d8bd94f46582510e905f7895fbcbb624437a33d83df06fe12eece4f.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
3.0MB
-
Filesize
12KB
-
Filesize
12KB
-
Filesize
124KB