Analysis
-
max time kernel
123s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
30/12/2023, 22:12
General
-
Target
1e151f67574971f3e3af428f1734a97a.ps1
-
Size
2.8MB
-
MD5
1e151f67574971f3e3af428f1734a97a
-
SHA1
564bc78f4e91716d6395306cf6942c47a8854edb
-
SHA256
a04282e99ce4ac2e999aef202a34e11f0799f8afb9e2d3623d57fe8cd85c6ae1
-
SHA512
29f732847acadb609d45d15f895ae8d199eca2043ed20335c1dca04bc701a456bb3ef3f851aa3089e85c14513dc975ac772e0b1db091cb09b9828f1a0018da79
-
SSDEEP
49152:oljQFAFfe75KvK32Drx14tHwT7CcajalPhe7dWOwb:u
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\1e151f67574971f3e3af428f1734a97a.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB