Analysis
-
max time kernel
122s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
07-03-2024 18:15
General
-
Target
网络同居程序/bbs/admin/members.inc.ps1
-
Size
85KB
-
MD5
4d9a233e0bfcdfd902bfd9c59b34ed8b
-
SHA1
c5f68dbfcbfc38d1c248bbaf6d0eb8ab49e122c3
-
SHA256
dd1fdb4796a77184e71c297afffd45b896766312b5fba57040d259a825474076
-
SHA512
0402c9822b78f38b2ddb580b59e1c99649592195f4bf1da546cb3de2999c2452b296804df0b81dc1f6bcef2d61f48ac0184c562f0e49672322e745ecb77a5328
-
SSDEEP
1536:3w2y8mu09uzsKFJ1e6q7IdwpzyVmLmbauw4b:VZVFJ1Wn9yVLbanY
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\网络同居程序\bbs\admin\members.inc.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
512KB