Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20-04-2024 11:53
General
-
Target
atspcleannew.ps1
-
Size
2KB
-
MD5
f53d227d03315910a72da97d4fc774d5
-
SHA1
cdd5e7ae4c20b2e5e746edf863e557c419bbae59
-
SHA256
c96c0efc04c9bc99c2b472362d81e61511d9bf28f472ee92d8b9ea8a15f4e470
-
SHA512
aac5927f9bbb00a7d6539cf3e966303b501d29d280c266386c3a5dcedc638e17da96024310e6b0c20a5a5ffd03521ea0e4728a62b712004667c4f9d8504f77ac
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\atspcleannew.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
9.6MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.6MB