Resubmissions
11-05-2024 11:52
240511-n1tnhaeg6v 8Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 11:52
Static task
static1
Behavioral task
behavioral1
Sample
view.ps1
Resource
win7-20240220-en
windows7-x64
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
view.ps1
Resource
win10-20240404-en
windows10-1703-x64
4 signatures
300 seconds
Behavioral task
behavioral3
Sample
view.ps1
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral4
Sample
view.ps1
Resource
win11-20240426-en
windows11-21h2-x64
4 signatures
300 seconds
General
-
Target
view.ps1
-
Size
2KB
-
MD5
822de3d8c8af7709f0e37a39b65031e2
-
SHA1
eaf77179f230a72ad22242da9631b2304723793a
-
SHA256
0e7ecc230f01a72af0815bd8059c7dd90af4b498c57c3548a4f44fdf25b21517
-
SHA512
c0c85ad26a5bc2e17ffb1a33c4f19b584a50e040510214d3211badb91ccdcaae68047f7e93902c6b91f3609ce1e6a86bfd6f3fabdff892b60bbb1898d87a77c0
Score
3/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
powershell.exepid process 2184 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
powershell.exedescription pid process Token: SeDebugPrivilege 2184 powershell.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2184-4-0x000007FEF573E000-0x000007FEF573F000-memory.dmpFilesize
4KB
-
memory/2184-5-0x000000001B5C0000-0x000000001B8A2000-memory.dmpFilesize
2.9MB
-
memory/2184-7-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2184-6-0x0000000002350000-0x0000000002358000-memory.dmpFilesize
32KB
-
memory/2184-8-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2184-9-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2184-10-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2184-11-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB
-
memory/2184-12-0x000007FEF5480000-0x000007FEF5E1D000-memory.dmpFilesize
9.6MB