Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/01/2024, 20:35
General
-
Target
3k894EhX6aMN2sTaAwrICX74LstztIfg.ps1
-
Size
297KB
-
MD5
3fe9069343dc275eff81d492f0b9638c
-
SHA1
b7be74e4407d2af76fc15a2a996dbbce8ef8e5db
-
SHA256
8b95b8c5dbd8c885e4c3f30a86ffcce1447933ca8140a53cf8c21e5c66079f97
-
SHA512
9a5b02fd814fdac6e8875a35d1a05f7c2f594cd276ff2e46f0a5a60313a22d7301c9dd20e4128918892c6ca5779f57db5238a1b64175eec31152c4637e4b6917
-
SSDEEP
6144:Gz5oKGhcDeTk6Lth9hA3LOihVRwxdvkRvjEoJ3hFJh9Nf/NtCxeX8:G+KGhO6kiMOxdvk3hFJU48
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\3k894EhX6aMN2sTaAwrICX74LstztIfg.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB