Analysis
-
max time kernel
42s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
27-11-2022 17:48
General
-
Target
a5624fbc69190bf108c976c5f79c67c80382efc4633379818978ffd323229696.ps1
-
Size
36KB
-
MD5
8cc2fed65661d9dba8f9c386d8011559
-
SHA1
1553d9f89e616e1ca4b40a156353a7a7f51eb02e
-
SHA256
a5624fbc69190bf108c976c5f79c67c80382efc4633379818978ffd323229696
-
SHA512
f0f42230e938a8db840125596f8cb7ae615c22f9bfb1769b74222dccc40eb15333e7ee999f342383de86c16ca71de7b539026e7bf57d282e8b5aa7109acf228b
-
SSDEEP
768:2Ww73vKYVQhy14KTu7G46K+Z7qDvhQ4oFRjE5lgPA5w4OCVsfEPTADjjhECNECoq:2WSKYVQhy14Uu7G46K+Z7qDvhQ4oFRjD
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\a5624fbc69190bf108c976c5f79c67c80382efc4633379818978ffd323229696.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
12KB
-
Filesize
11.4MB
-
Filesize
3.0MB
-
Filesize
124KB
-
Filesize
12KB