Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
22-12-2023 15:52
General
-
Target
e2e0a441291c5f7201101cf266aa2fc0.ps1
-
Size
656KB
-
MD5
e2e0a441291c5f7201101cf266aa2fc0
-
SHA1
fb41b0dd8b9c9bb363ab9eebbb9ccf78508fab78
-
SHA256
f8973553be49784e769a41bd24358bfc076427c3004773161c479013f7b4aa87
-
SHA512
a43816d2755b4691b2de6b76718c1918e90796a1c6cfc21faf66ad8c0bbde0b3e740c7a43608c3bce76f3c37f55f60a8df6599e66b14d27c3c88c03340f8fde0
-
SSDEEP
12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64E8TVkc5A+:g3ITmr+
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\e2e0a441291c5f7201101cf266aa2fc0.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB