Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
13/11/2023, 14:56
General
-
Target
vendor/guzzlehttp/guzzle/src/Cookie/SessionCookieJar.ps1
-
Size
1KB
-
MD5
5e3eda0ccd88b0e3b9c51835e5c8b32e
-
SHA1
20ffd780dda77043266cae573722854e0d29c39e
-
SHA256
ff8ad4a450feac9fa79db5de008f5192f57e7c1dd5d6945c5993433782edd7f9
-
SHA512
9cf11d2908913a7555e9e190e6a4ffb0f0e26ddb3d141faeb0e7bafaa6f0b3259119ce6febb6d01b5a7f5a3193f72a099f08ea45b5955bdc7120bfd4857879a6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\vendor\guzzlehttp\guzzle\src\Cookie\SessionCookieJar.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB