Analysis
-
max time kernel
122s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
02/08/2024, 20:23
General
-
Target
A3-Antistasi-Ultimate-stable/Tools/Builder/buildAddons.ps1
-
Size
2KB
-
MD5
6dbe1d4a08a38ec42d04fb9880e0243c
-
SHA1
bf2068af3bb84fa1dc545a621314113df96f2690
-
SHA256
ebe3115b67d4b65226a6eca48a7b37693b4b9545c84b0afd1fe20ca33a2f8ae6
-
SHA512
310d75befe009cc463a5cea6b4db46ffadc63e69934bd852c9d3969616cc16bc8e7b2b8c475eb76fbb4a3e705dd8c22a6af237e739b52ccafc43b8effd7cdf07
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\A3-Antistasi-Ultimate-stable\Tools\Builder\buildAddons.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
4KB