646c5b0bc32d7f37a4370756116b820e9231ef929308f42e89a32ea5d3427d26

Resubmissions

09-12-2022 20:54

01-12-2022 16:23

max time kernel
9s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01-12-2022 16:23

Target

teased/phallic.ps1
Size

364B
MD5

6e7cf38081b202b76d7fd016655fb768
SHA1

b9afacb0bb1c48d50503a5065df9ab07e80cde7a
SHA256

61ab7ec54c252b9ed26568d22c57496b8386d9c26fbbaa978970dcdd42b0e0c3
SHA512

8d75549e5c80fbf7c2eb51be45a596c253c37e99e5b8c403327b617861b4f4efd66152cf6270a49436dd4163437a846f7b63dd3aa0d5d9f5f5a4b98714b90e05

Score

1^/10

Suspicious behavior: EnumeratesProcesses 3 IoCs

Processes:

powershell.exe

pid process

1956 powershell.exe
1956 powershell.exe
1956 powershell.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

powershell.exe

description pid process

Token: SeDebugPrivilege 1956 powershell.exe

description	pid	process
Token: SeDebugPrivilege	1956	powershell.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

powershell.exe

description	pid	process	target process
PID 1956 wrote to memory of 1584	1956	powershell.exe	rundll32.exe
PID 1956 wrote to memory of 1584	1956	powershell.exe	rundll32.exe
PID 1956 wrote to memory of 1584	1956	powershell.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" C:\users\public\modicumDenunciators.txt DrawThemeIcon
2⤵
PID:1584

memory/1584-58-0x0000000000000000-mapping.dmp

Download
memory/1956-54-0x000007FEFB8A1000-0x000007FEFB8A3000-memory.dmp

Filesize
8KB

Download
memory/1956-55-0x000007FEF34D0000-0x000007FEF3EF3000-memory.dmp

Filesize
10.1MB

Download
memory/1956-56-0x000007FEF2330000-0x000007FEF2E8D000-memory.dmp

Filesize
11.4MB

Download
memory/1956-57-0x00000000028C4000-0x00000000028C7000-memory.dmp

Filesize
12KB

Download
memory/1956-59-0x00000000028C4000-0x00000000028C7000-memory.dmp

Filesize
12KB

Download
memory/1956-60-0x00000000028CB000-0x00000000028EA000-memory.dmp

Filesize
124KB

Download