Analysis
-
max time kernel
140s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 10:29
General
-
Target
admin/scr_module_modify.ps1
-
Size
7KB
-
MD5
747ef14d3306f7f872773077868ac753
-
SHA1
2457d1bcebe502de2b12cbbc536562310349ca2c
-
SHA256
04b1b7a9fd3fafbc35fd98c3eee47966345539983611f8fcb57988f7ab401efb
-
SHA512
5fea2d8ba08b99be5bc269d50e84035e121c6a8ae6e8acde525cddd7a124a10436e82ca17ff383225d63d8a358b6efbf995e930204f4c38b95d90c35a833ba13
-
SSDEEP
192:XUUVQQWROdF96qyW3WRv6Kth6v6Vzf6VR6/6VtH16y6ryr6VL6r6V5p6T6GvUk9+:XUs+OdFBrWRv6oy22Uk0
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\admin\scr_module_modify.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
136KB
-
Filesize
10.8MB