Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/09/2024, 15:31

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\powershell.exe command="C:\Users\Admin\AppData\Local\Temp\powershell.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: This version of %1 is not compatible with the version of Windows you're running. Check your computer's system information and then contact the software publisher.

General

  • Target

    powershell.exe

  • Size

    516KB

  • MD5

    ef46f77a6aa0b8e734d9d6704fb5e8aa

  • SHA1

    eef247794462e55d53cc362f79d7010f9ccfa27b

  • SHA256

    52e2de6044af90b16ee48e2f12f4b2260b0d6ce4a96e125501c7d7a503ca4f67

  • SHA512

    91a3470e5ce81e7b7642e5f882bfa1d2b37f34c044b4e7b850bb8da456e711ec479a2a3c4dd701bd293c51c4ce308adcf167eae6baf3e74aff67e998ea4d9fcb

  • SSDEEP

    6144:C0B7NCJFMCFV9kfr16uTa/2WwO9sV1yZywi/PzNKXzJ7BapCK5d3klRzULOnWyjr:ML+W2KXzJ4pdd3klnnWosPhnzq

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads