Analysis
-
max time kernel
91s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-es -
resource tags
-
submitted
01-01-2023 04:29
General
-
Target
Steam Checker By abbadon/config/System/C2.ps1
-
Size
216B
-
MD5
f686af0c71099697b9e3cdb67dafde71
-
SHA1
e24acca7145e84c4cb95627d8402895d0cf15dea
-
SHA256
b64e5111b381cf66fd84aaf59ea503adf737c620ef550363466ce15822f52743
-
SHA512
b2d90ac3447afbba7b0a6f43584f9d9533b0980dbb74e9d084f108cbcc80c3b299cbf120bfae13c4fbeb952c5208c99a4a08492ac0b732ebe1c1f8dbbbbeb5cc
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\Steam Checker By abbadon\config\System\C2.ps1"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
520KB
-
Filesize
136KB
-
Filesize
64KB
-
Filesize
1.0MB
-
Filesize
10.8MB
-
Filesize
10.8MB