Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-01-2024 12:44
General
-
Target
winPEAS.ps1
-
Size
76KB
-
MD5
27575150f990d261d6fca56f441bbead
-
SHA1
110720aeae14d726cebd0ecaf86a00b231c0be18
-
SHA256
39e090bbb9a1a487c877712d46cb4d74fc83972d5579c54f3f2c454bfef0f5f4
-
SHA512
6714d39b0224d18185bfd6b5145a2e01d73258e33403f12be3e3562389a1ca704055e91d0c854dc97f1b802a9d79a482a6ca5a2663ef1c115de38d282982aad9
-
SSDEEP
1536:LALLLaUMXAu5jNud4e1M6w1dvAYBS7p/B2bsZ0UYFXwuI:Lu/oX57BepZ2bsZ0UYFXo
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\winPEAS.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB