4a19ce649f5056cc58e8facde71ef49d442c28fd308be131ecaa64ca1af93274 | Triage

Analysis

max time kernel
0s
max time network
3s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13-03-2024 09:44

Sharing

Reason

Machine shutdown

Report Analysis Logs

General

Target

c58dd3d488f98f2f3a033cf1e5d08dd9.ps1
Size

534KB
MD5

c58dd3d488f98f2f3a033cf1e5d08dd9
SHA1

9df35cfaa2e8030561eb7bf9a614a0479844fec9
SHA256

4a19ce649f5056cc58e8facde71ef49d442c28fd308be131ecaa64ca1af93274
SHA512

c4448568f6e43afdd0d98ef01af870fdb8969a85691994c55b4308b48f353bb205f2ffe8f3b194b0b1dba3f7c735fd93431bb7edbdc3899a458237c43d38e345
SSDEEP

12288:hpK5q6LiSSGEjVZ266IQrXUhCuWG/O4TNVQu:hYbubOM

Score

1^/10

Malware Config

Signatures

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\c58dd3d488f98f2f3a033cf1e5d08dd9.ps1
1⤵
PID:2256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2256-4-0x000000001B1E0000-0x000000001B4C2000-memory.dmp

Filesize
2.9MB

Download
memory/2256-5-0x0000000002510000-0x0000000002518000-memory.dmp

Filesize
32KB

Download
memory/2256-6-0x000007FEF6080000-0x000007FEF6A1D000-memory.dmp

Filesize
9.6MB

Download
memory/2256-7-0x0000000002790000-0x0000000002810000-memory.dmp

Filesize
512KB

Download
memory/2256-8-0x000007FEF6080000-0x000007FEF6A1D000-memory.dmp

Filesize
9.6MB

Download
memory/2256-9-0x0000000002790000-0x0000000002810000-memory.dmp

Filesize
512KB

Download
memory/2256-10-0x0000000002790000-0x0000000002810000-memory.dmp

Filesize
512KB

Download