Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
22-12-2023 12:54
General
-
Target
91bf601ab3b4c07416e308248528e8f1.ps1
-
Size
656KB
-
MD5
91bf601ab3b4c07416e308248528e8f1
-
SHA1
79680965ebe4b084fe04c874365030bff782839b
-
SHA256
983594ed65e67379223bb39d0205948c679bca82fff8018080e7e8aa01aa1fbb
-
SHA512
a17cc6cb23ae5d63f0ae486b2129b24a55d42b2152f346198781612ccb9a0d8874e553516ade6480de3571599655f9e9d5013706b1d122beeb5ee6459ee423e1
-
SSDEEP
12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64b8TVkc5A+:g3dTmr+
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\91bf601ab3b4c07416e308248528e8f1.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB