Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
15-04-2023 19:55
Static task
static1
Behavioral task
behavioral1
Sample
target.ps1
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
target.ps1
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
target.ps1
-
Size
2KB
-
MD5
d5ce3f4565738f31564d371028405db5
-
SHA1
c53c811e3be0be5706db2864c59cdbcabd833af3
-
SHA256
4fe40883ca43c494ea64b4a08b42aa2758a2d09e239a9d256f33e53a00d16b0d
-
SHA512
5f6ad159ba9e8bb5d05cb38cf0a2e72d52adddcee7b7175568d93bbad4bffd27a8d20fbe7d5b3b0ac8c4b56266f78048ecb3fce1cddef8f5100acce3a29f641d
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1732 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1732 powershell.exe