Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26-12-2023 15:58
General
-
Target
7ad243cf69997e630c9fa094d332bb5c.ps1
-
Size
83KB
-
MD5
7ad243cf69997e630c9fa094d332bb5c
-
SHA1
0b00a06c3b0366592db72a4b14aca68e78c98ce9
-
SHA256
9d3fe4ea50a0c5ea683b9ed82ac9de2aca2b86f7f09ed2223ca63910d68a028d
-
SHA512
c19e9eaf3eb2054ecd12d0cc85fc21e53edc8d19d12ca61850968f69fc50d5542f58bf7b463c45f17185db2c0cc82c982f1dc8bbeb14c9691ae253aae451405e
-
SSDEEP
1536:150JAG9/EHcoDq2VgpIxhZQX4QNrMWDGiigDkldm3gnRWJctPoPIkW6pOu2u7WXP:4EcoDc6xhCI6MeBklOg2cPeIdu2u7e
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\7ad243cf69997e630c9fa094d332bb5c.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB