5be3a53440a1422f853358cf0bf0b60cbb08ab943d989faaac2865207b8c5661 | Triage

Resubmissions

20/04/2024, 18:18

240420-wx4nasee59 10

20/04/2024, 18:18

240420-wxyr2see57 1

Analysis

max time kernel
0s
max time network
1s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 18:18

Sharing

Report Analysis Logs

General

Target

run.ps1
Size

285B
MD5

79d5729de7996aefc02ce1f13579caaa
SHA1

263eb9ac39024ad390c369f5e51736801ee7178d
SHA256

5be3a53440a1422f853358cf0bf0b60cbb08ab943d989faaac2865207b8c5661
SHA512

3c82f11f72266d7a175c47ad7b4e39ed8ab5446b169358083f9848d7fdd762da15273b6793d710e2f253b058ebd31a6e2d4f135d126fea7af02231e981f056b4

Score

1^/10

Malware Config

Signatures

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\run.ps1
1⤵
PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1512-5-0x000007FEF5BC0000-0x000007FEF655D000-memory.dmp

Filesize
9.6MB

Download
memory/1512-4-0x000000001B5C0000-0x000000001B8A2000-memory.dmp

Filesize
2.9MB

Download
memory/1512-7-0x0000000002BF0000-0x0000000002C70000-memory.dmp

Filesize
512KB

Download
memory/1512-8-0x000007FEF5BC0000-0x000007FEF655D000-memory.dmp

Filesize
9.6MB

Download
memory/1512-6-0x0000000001C10000-0x0000000001C18000-memory.dmp

Filesize
32KB

Download
memory/1512-9-0x0000000002BF0000-0x0000000002C70000-memory.dmp

Filesize
512KB

Download
memory/1512-10-0x0000000002BF0000-0x0000000002C70000-memory.dmp

Filesize
512KB

Download
memory/1512-11-0x0000000002BF0000-0x0000000002C70000-memory.dmp

Filesize
512KB

Download
memory/1512-12-0x0000000002BF0000-0x0000000002C70000-memory.dmp

Filesize
512KB

Download
memory/1512-13-0x000007FEF5BC0000-0x000007FEF655D000-memory.dmp

Filesize
9.6MB

Download