1c66423f1cbcd1967d66b888c071f9bfff5129f1f2b7be87004c72910d764429

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 22:21

Target

locales/uk.ps1
Size

688KB
MD5

ee70e9f3557b9c8c67bfb8dfcb51384d
SHA1

fc4dfc35cde1a00f97eefe5e0a2b9b9c0149751e
SHA256

54324671a161f6d67c790bfd29349db2e2d21f5012dc97e891f8f5268bdf7e22
SHA512

f4e1da71cb0485851e8ebcd5d5cf971961737ad238353453db938b4a82a68a6bbaf3de7553f0ff1f915a0e6640a3e54f5368d9154b0a4ad38e439f5808c05b9f
SSDEEP

12288:wrccq9nty/KiDswU1nbx05kB3IjUUmEg5KuoLNiXElqnOyh:HGX35EEK

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

powershell.exe

pid process

2496 powershell.exe
2496 powershell.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

powershell.exe

description pid process

Token: SeDebugPrivilege 2496 powershell.exe

pid	process
2496	powershell.exe
2496	powershell.exe

description	pid	process
Token: SeDebugPrivilege	2496	powershell.exe

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x424 0x2f4
1⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_hld4np5o.0wm.ps1
Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
memory/2496-9-0x00000297F1840000-0x00000297F1862000-memory.dmp

Filesize
136KB

Download
memory/2496-12-0x00000297F1880000-0x00000297F1890000-memory.dmp

Filesize
64KB

Download
memory/2496-11-0x00000297F1880000-0x00000297F1890000-memory.dmp

Filesize
64KB

Download
memory/2496-10-0x00007FFF18D30000-0x00007FFF197F1000-memory.dmp

Filesize
10.8MB

Download
memory/2496-15-0x00007FFF18D30000-0x00007FFF197F1000-memory.dmp

Filesize
10.8MB

Download