Analysis
-
max time kernel
15s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
25/11/2022, 23:29
General
-
Target
282c3f6e30b5d25702bbbe35f6702a21fe1beb4a1da5e1cf5e6a2c108d413c41.ps1
-
Size
4KB
-
MD5
d062aedecf65041d0749176db8c29ef4
-
SHA1
5756f850f6ce328f62dd0a4bc416d0d2159315a7
-
SHA256
282c3f6e30b5d25702bbbe35f6702a21fe1beb4a1da5e1cf5e6a2c108d413c41
-
SHA512
8f3890448368157f6de79e090ae40a857742932c62b3e5facecd9addd38b345276d833212c93b017d92a02dd24a9ea641e6d91a5fcd193761eaa7179b7aebdc3
-
SSDEEP
96:7NYOJYpNNoop6HHlMj2iiAE9vraz/i9moOnsq9QI1HM:73JYpYoMA2x9vrc/i9m6q9QQs
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\282c3f6e30b5d25702bbbe35f6702a21fe1beb4a1da5e1cf5e6a2c108d413c41.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
12KB
-
Filesize
124KB
-
Filesize
12KB
-
Filesize
124KB