Analysis
- max time kernel
42s - max time network
45s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
07/02/2023, 22:59
General
- Target Report.ps1
- Size 162KB
- Sample230207-2ydfdsga92
- SHA256 cf4921a55199c27c24e4fbacc4a3e90d4d5249e4aeb4de2eafe56d395cdfbde4
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\Report.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2036-54-0x000007FEFBA81000-0x000007FEFBA83000-memory.dmp
memory/2036-55-0x000007FEF40A0000-0x000007FEF4AC3000-memory.dmp
memory/2036-56-0x000007FEF3540000-0x000007FEF409D000-memory.dmp
memory/2036-57-0x0000000002944000-0x0000000002947000-memory.dmp
memory/2036-58-0x000000000294B000-0x000000000296A000-memory.dmp
memory/2036-59-0x0000000002944000-0x0000000002947000-memory.dmp
memory/2036-60-0x000000000294B000-0x000000000296A000-memory.dmp