Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/03/2024, 22:28
General
-
Target
powershell-2.ps1
-
Size
1KB
-
MD5
229c21d9ba8dd53ea9f3fba48217669a
-
SHA1
1c154a0c6654e326fe16157d5c2f5cabb34e8e2a
-
SHA256
ca6e30e016952ed2b0b3a5ce12e7b36e8df5618f901769a74f7efc519bfc693a
-
SHA512
c4178216a8b1c1230edbb5729af9a8aed6c1855647d21d197d64789bb5d848c34d8891fc82077a286b9165ef9ba27bd46db65e122586109dfbad5645c8db11ee
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\powershell-2.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.6MB
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB