Overview
overview
1Static
static
1WRK.zip
windows7-x64
1WRK.zip
windows10-2004-x64
1ALIS-Logs_Cleanup.ps1
windows7-x64
1ALIS-Logs_Cleanup.ps1
windows10-2004-x64
1ALIS-Logs_Copy.ps1
windows7-x64
1ALIS-Logs_Copy.ps1
windows10-2004-x64
1ALIS-Logs_List.ps1
windows7-x64
1ALIS-Logs_List.ps1
windows10-2004-x64
1ALIS_MODEL...ge.ps1
windows7-x64
1ALIS_MODEL...ge.ps1
windows10-2004-x64
1Alis_DBRestore.ps1
windows7-x64
1Alis_DBRestore.ps1
windows10-2004-x64
1GetBLLogs.ps1
windows7-x64
1GetBLLogs.ps1
windows10-2004-x64
1JavaOptionsMaster.txt
windows7-x64
1JavaOptionsMaster.txt
windows10-2004-x64
1alis_check_par.ps1
windows7-x64
1alis_check_par.ps1
windows10-2004-x64
1alis_servi...ol.ps1
windows7-x64
1alis_servi...ol.ps1
windows10-2004-x64
1check_bl_logs.ps1
windows7-x64
1check_bl_logs.ps1
windows10-2004-x64
1check_form...ng.ps1
windows7-x64
1check_form...ng.ps1
windows10-2004-x64
1check_groups.ps1
windows7-x64
1check_groups.ps1
windows10-2004-x64
1check_mem.ps1
windows7-x64
1check_mem.ps1
windows10-2004-x64
1check_tomcat_mem.csv
windows7-x64
1check_tomcat_mem.csv
windows10-2004-x64
1check_tomcat_mem.ps1
windows7-x64
1check_tomcat_mem.ps1
windows10-2004-x64
1Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
24/08/2023, 20:09
Static task
static1
Behavioral task
behavioral1
Sample
WRK.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
WRK.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
ALIS-Logs_Cleanup.ps1
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
ALIS-Logs_Cleanup.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
ALIS-Logs_Copy.ps1
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
ALIS-Logs_Copy.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
ALIS-Logs_List.ps1
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
ALIS-Logs_List.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
ALIS_MODEL_StoragePurge.ps1
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
ALIS_MODEL_StoragePurge.ps1
Resource
win10v2004-20230824-en
Behavioral task
behavioral11
Sample
Alis_DBRestore.ps1
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
Alis_DBRestore.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
GetBLLogs.ps1
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
GetBLLogs.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
JavaOptionsMaster.txt
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
JavaOptionsMaster.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
alis_check_par.ps1
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
alis_check_par.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
alis_service_control.ps1
Resource
win7-20230824-en
Behavioral task
behavioral20
Sample
alis_service_control.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
check_bl_logs.ps1
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
check_bl_logs.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
check_formula_logging.ps1
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
check_formula_logging.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
check_groups.ps1
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
check_groups.ps1
Resource
win10v2004-20230824-en
Behavioral task
behavioral27
Sample
check_mem.ps1
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
check_mem.ps1
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
check_tomcat_mem.csv
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
check_tomcat_mem.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
check_tomcat_mem.ps1
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
check_tomcat_mem.ps1
Resource
win10v2004-20230703-en
General
-
Target
ALIS-Logs_Cleanup.ps1
-
Size
472B
-
MD5
672a981580a158ee44508515055ce345
-
SHA1
73daba2bff71f87f00ce5199b9c2394b33a20c6b
-
SHA256
69718b9a6b0abda974804e0eae667137086e2a3a9e5cbaecebed79c437b1d683
-
SHA512
c662216dd41ddfcec1bd4052711f6a49b865f81d1369480baa65cd25c288804d1029043abb60af86fe3fb8c33ccadbb8c23750648d4b026dbe5519baf2bc0c32
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2576 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2576 powershell.exe