Analysis
-
max time kernel
119s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
29-12-2023 19:08
General
-
Target
01431d8595544e855d961874b4c940f2.ps1
-
Size
13KB
-
MD5
01431d8595544e855d961874b4c940f2
-
SHA1
c663837cc109d876f03959d899fb2a209dba43e0
-
SHA256
f69c3aef1ec1f3e0803e42707331975bb134bf3d9751fcd5bdc83a0ea91e132b
-
SHA512
d4c820bd910ca8a7adf2dc7e2278e51d6acf2e84be9ae58482b0dfd7ef7a7036b87066ceb34b9935015dc679df4790ac53256feba017af299a3b974f0f6ca3cb
-
SSDEEP
48:nbB6nkKQh4VonPReLU+i+NKdweheC2WP6ntnnsaiDvexe8AxzJQwdIYMAQlcJoFe:np6q+U+rAqVm/QlvFHD05jj
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\01431d8595544e855d961874b4c940f2.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB