Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01/01/2023, 17:32
General
-
Target
data/scripts/Apps/Remove default apps (Recommended).ps1
-
Size
445B
-
MD5
7506ab2bca5cbcd8c3d5759255bdd75f
-
SHA1
2b8c11e855cee15b0672d9ac523873ff2b359e2e
-
SHA256
eec1c0c727438bbf0c9cc3fc89b4261bc20fef37d918fd8f2140502a090dede4
-
SHA512
f48586f65d221e3ea9b4985aa12f7587d91c94b2f81b779abe6151572c278e0b6f007070b3c52a278869f4749be43b29df8919a3e040e791b682874ccf7a29f6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\data\scripts\Apps\Remove default apps (Recommended).ps1"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
88KB
-
Filesize
40KB
-
Filesize
152KB
-
Filesize
200KB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
32KB
-
Filesize
24KB