Analysis
-
max time kernel
374s -
max time network
867s -
platform
windows10-1703_x64 -
resource
win10-20220812-es -
resource tags
-
submitted
04-01-2023 13:57
General
-
Target
SpotX-Win-main/scripts/installer-lang/vi.ps1
-
Size
4KB
-
MD5
a1b336aaa38c0f7141d031ca4c7bb8f2
-
SHA1
9ad442d0b4524171f8e348ea4c5cae6c3b41c2d2
-
SHA256
56feebe539cb38d2bfc3d35b832eca8062a55dcd7308416cb2ce4db937cf87ec
-
SHA512
b6238d959fd7cf7dbe16c087e9759c2aaee6bf7f43f1a8e7bb315be66bf2527b9cfff8e457a043d2ac56e8694965cd0a6bd9914fd7676391c14254b9584810c0
-
SSDEEP
96:7RM8wfTushuskHq/FtXDDvIIjncOULJEP6FKm3kIoCek2/aeZVzSoYJLqChBX:tMFHLkOVvz1uf0D/R1eLqChBX
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\SpotX-Win-main\scripts\installer-lang\vi.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
520KB
-
Filesize
136KB
-
Filesize
64KB
-
Filesize
1.0MB
-
Filesize
472KB