Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
11/01/2024, 11:24
General
-
Target
536277686aacdbed6678b4d3e153b9bc.ps1
-
Size
166KB
-
MD5
536277686aacdbed6678b4d3e153b9bc
-
SHA1
c41d5a747f4da23c580dfec6badd42c0c35c139a
-
SHA256
633043a66408f98f969625a57e6a31259f0a8a5af1972a2e5ac03a1a404395a1
-
SHA512
f126bef402dda55b3dd0f69a6e480112e7078cdbbb6351a59061cbad639d689a6146ebe99bbb7b7c4b270cd709ad8978b3bf105b93c6214412bcf54212305283
-
SSDEEP
3072:KL1Jy6v+0CZgkNWgXTviGbkYdMH4RDJQhBCyWe4ur37w:KL1Jy6v+0LkNVXTviGbkYdMH4RDJQhBw
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\536277686aacdbed6678b4d3e153b9bc.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB