Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
22-12-2023 16:54
General
-
Target
f91a93aba78c83e1e03a3ce5e2dc72c6.ps1
-
Size
656KB
-
MD5
f91a93aba78c83e1e03a3ce5e2dc72c6
-
SHA1
e0c790cc02a7af6ec022f81d1e6a2000e39fe0bc
-
SHA256
37cdb8d6a19c396cebbe44953363fcf9c7f7c27b1d27734edb81491dfb8c3069
-
SHA512
4235ad761835c2610c1e4314d7367f11970b546fcea106be81eaf698b0017c5269aa3264c46126e9d9269d4e9b034f21923b3ac1fd76302494a8f2dffd2d3815
-
SSDEEP
12288:EZjw0RJ9u5ILYDxD3fxYehza/tw64S8TVkc5A+:g3yTmr+
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\f91a93aba78c83e1e03a3ce5e2dc72c6.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
9.6MB
-
Filesize
32KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB