Analysis
-
max time kernel
31s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
12-04-2023 14:21
General
-
Target
vicuna.ps1
-
Size
8KB
-
MD5
977467da6fd65a523382b2dbaf797166
-
SHA1
bf29aa1e497b51e1e24958b109a5e4461c069b14
-
SHA256
4056a66a6f0aedc14f62c3287c8e77e0c002f55b50eacf647f15d6a709f1a5bd
-
SHA512
a4a0a69ec2e5c10d0a715a7f7313dd446a7c177c5d2f5bad6eaebd1b2c8db9f4d632beaa2ad90ca0dc72813c4369137baf987dc1c411262c33736e0173514e90
-
SSDEEP
192:80DdDd6q5tQQVTJ4HHEjCH7dD3N2vFXRYYMW7UAmj/GwZul:80DJXtQITJ4HHEpV5
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\vicuna.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB