Analysis

  • max time kernel
    2s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/08/2023, 21:12

General

  • Target

    psss.ps1

  • Size

    6KB

  • MD5

    40d4654340f844a7226eb8363d9bdc4f

  • SHA1

    c50e527a80bf984a99149738b7533aa887651e0a

  • SHA256

    7b22dcff146ecaa431ff85960dcd872ad619603f76cad0817dbc6d3ec200c8ca

  • SHA512

    26ab43642caa28485c094c41414f7468087dcf9ad052d3545e32ff0e2cc6abba8f6201e20ac65a9db612d3893ca61398f6df2404fee3ed27b1bafc2adc253879

  • SSDEEP

    96:oLN9m7Du9qN6+5BPrxQhZVDXffmolG2lOOCApOCtI41RON/aORnwy:oLbm7DIqv/P1Q1D3mollOennaN/ady

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\psss.ps1
    1⤵
      PID:1728

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_xgzmg0qk.1vg.ps1

            Filesize

            60B

            MD5

            d17fe0a3f47be24a6453e9ef58c94641

            SHA1

            6ab83620379fc69f80c0242105ddffd7d98d5d9d

            SHA256

            96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

            SHA512

            5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

          • memory/1728-133-0x00000287EC1E0000-0x00000287EC202000-memory.dmp

            Filesize

            136KB

          • memory/1728-143-0x00007FFD0DBC0000-0x00007FFD0E681000-memory.dmp

            Filesize

            10.8MB