Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
27/01/2024, 06:08
General
-
Target
Softbiz Link Directory v1.0/admin/editlink.ps1
-
Size
12KB
-
MD5
c27f6e70b1b3d311f320a36605156f5e
-
SHA1
26ca6b95eacf1a7b3754468ef7a683acd335a38d
-
SHA256
0e796dd452f98be7f9ec9c4bc9bf43a02ad1df394cb49447db9ee07af5d8a93f
-
SHA512
6e465dbbb943710db0ace219a4195b3345809d5d101b5977125564741e1d6821007a1b01f8b38aca1c1424be3097107b439a994db0f7e0636c1420699aaadea4
-
SSDEEP
384:Pi4StO+RONcPhXA+xXaX7t0X1t5X8OteXTtwki9Lgf:64eOoccJwEKqhaIZ8
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\Softbiz Link Directory v1.0\admin\editlink.ps1"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB