Analysis
-
max time kernel
29s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
19/04/2023, 21:14
General
-
Target
8f9fa90f6de669f9492a1a524fbefdda74499f4a047539b0388575f07f14f909.ps1
-
Size
13KB
-
MD5
617c314ef4eb79c18510221133d8aa4c
-
SHA1
4f49a9637b2ac9cbb2f84b51f157dfa62df3ea2f
-
SHA256
8f9fa90f6de669f9492a1a524fbefdda74499f4a047539b0388575f07f14f909
-
SHA512
e12e98ca2ccf04ba6862b95a1357b2576940b4fc8dc8b683b75d89815ff019cdf5dd8ac3c95b75483406e275219ed97e380e12e3a0f2fbaad5d7808592fb6d11
-
SSDEEP
192:960TFevqILyqnJKgSvyGqcjRn3Qw0xDNm/kD23LV/aGREXRoFSU:M0vgS11dNQE3eooU
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\8f9fa90f6de669f9492a1a524fbefdda74499f4a047539b0388575f07f14f909.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
220KB