Resubmissions
03/08/2023, 20:26
230803-y72mssga52 1003/08/2023, 20:09
230803-yw4ysahb71 1003/08/2023, 20:08
230803-ywmphahb7y 1Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
03/08/2023, 20:26
General
-
Target
thirdstage.ps1
-
Size
1KB
-
MD5
c8a77460370bf6e5d6d060dc7fb9b0e7
-
SHA1
36b62c532c7b636085105512c308c8480315b8e4
-
SHA256
5152cce0db68c0feb952b3633c0069c5dd588ccf96286e111ad0e52bc90db526
-
SHA512
99b06209048f252f504a1ded6ca883538c16b37d117b0b150d3d4cf22ff9eee2f3cdf8a9a2e444c6106edb8a9ceffe8cafda7b09f441b9be0c69d92c2fb7a1f9
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\thirdstage.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.6MB
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB