Analysis
-
max time kernel
117s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
07/11/2023, 14:20
General
-
Target
tqtc-qt5-everywhere-src-5.15.5/coin/pre-provisioning/qtci-windows-10-x86_64/disable-clean-manager.ps1
-
Size
446B
-
MD5
2a0b01b12a8a9b4d37f57105afa1c6f1
-
SHA1
4e435bfdd6a02da0d48f2d4f0978186e0d135e90
-
SHA256
58e6f37ccb48fbece32ad68746a3db2d1982b18e701856f25f64cbdafe2a8293
-
SHA512
e3d3ac72c04be3d931686581806903c527d3439da3fa73c453702656381caf27fc58defc5abb97f70015ca246a0f878c633cd177f09a34e565898e7ed00b1390
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\tqtc-qt5-everywhere-src-5.15.5\coin\pre-provisioning\qtci-windows-10-x86_64\disable-clean-manager.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB