Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
22-12-2023 15:21
General
-
Target
d8b3a58ceb8f9960bb836f3fb44f561a.ps1
-
Size
656KB
-
MD5
d8b3a58ceb8f9960bb836f3fb44f561a
-
SHA1
bf828be8503f807c428145d46c3a905667e1731d
-
SHA256
947f49510001e228142923a110b38ececf9057c87693a4691a3d1998784d73f1
-
SHA512
c1f26898253e3c4283564c34bee015269f5411d283588c15ad462289032301a54dd415f535377748a6a67c30c1ed7705146232ccbeb0c46f9c745eefc50c1f6f
-
SSDEEP
12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64e8TVkc5A+:g3iTmr+
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\d8b3a58ceb8f9960bb836f3fb44f561a.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
2.9MB