Analysis
-
max time kernel
30s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
08/06/2023, 01:19
General
-
Target
462795caf5a51d5427c0a49a51137f22ef0043fa5d23d9b2f1d6a2ae555b3c6a.ps1
-
Size
4KB
-
MD5
51320d80f0eb4017cea697c92e199405
-
SHA1
b9a05deebd7c23d0d03693b6ba6e627d0a31d21d
-
SHA256
462795caf5a51d5427c0a49a51137f22ef0043fa5d23d9b2f1d6a2ae555b3c6a
-
SHA512
284cd7cc63b662645785a4c782d52021f2c09bbf5e2eb6e6258f7a37f2978e8bc575f124d84dfc72c8219b8cb9a2fdc816d05563c44b6df7b5d66d4f6a9b1fac
-
SSDEEP
48:AxzPy0wUeINLZINRcCXrM5Sp7qjfHKQt5G3cunDSy4h2kvDvD1Va32PNmv:A00E7Xg5E7qjvKQtAvnDL42kvDvD2v
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\462795caf5a51d5427c0a49a51137f22ef0043fa5d23d9b2f1d6a2ae555b3c6a.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
220KB