Analysis
-
max time kernel
374s -
max time network
872s -
platform
windows10-1703_x64 -
resource
win10-20220901-es -
resource tags
-
submitted
04/01/2023, 13:57
General
-
Target
SpotX-Win-main/scripts/installer-lang/it.ps1
-
Size
4KB
-
MD5
1bca6405c95ffe30f04a451b7ebc2b1f
-
SHA1
3322cbf453b8b121ee9124e45ef9eec1ba19f291
-
SHA256
8c715466140fa4dcc032d2531053334f90815f95a13af424d9836212d997fbc9
-
SHA512
25de1d5f3f54acecdba8e3a574e802dda8690845cc63b82febc0d061a5a2ea306f654082580c49ef8ae3a4ced0a074d7d6379930b09372dda1838c627d5e56e1
-
SSDEEP
96:sEFbisdFEtvntvSxFs2kLKpfBu+NDjwVNSE9ggiqXf50/AIVMcmc8sMqJSHIc4:3NZdK1SxFs2NpfTNDjU0Kg8fK3cImIc4
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\SpotX-Win-main\scripts\installer-lang\it.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
520KB
-
Filesize
64KB
-
Filesize
136KB
-
Filesize
1.0MB
-
Filesize
472KB