Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05-03-2024 12:26
General
-
Target
b4b0d35f5a38730395f28cacf450bab5.ps1
-
Size
85KB
-
MD5
b4b0d35f5a38730395f28cacf450bab5
-
SHA1
b1e1d48e53fa4aae1528b07adef64c6a7847f1b8
-
SHA256
ba1bd47751931247b9b2acb6ca8c3aca47440f334494c86ded94e95f6bd4777a
-
SHA512
234a9925a9c720695c43cbb67d64a8572faf6b45d8d31d55638dac5d1d84c416b63d482b2a9f843b98e08187d5ba30b3676ff1c4e89b80acd93c95c758fa1615
-
SSDEEP
1536:sCY6eB2CCtq/PljJosk1jaPQL2uWwpOSmrn6CWZ0NWghELst:N3eB9C0H5JO5aPWqSmrn6Ac8E6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\b4b0d35f5a38730395f28cacf450bab5.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
12KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
412KB