Analysis
-
max time kernel
9s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
01/09/2024, 17:22
General
-
Target
Dolphin-x64/Sys/GameSettings/GALE01r2.ps1
-
Size
24KB
-
MD5
fa67d9cbe6c128576b1f9ad9b1563cc9
-
SHA1
18692a82f7c2d09eaa414f10e58b37d563cfb7d5
-
SHA256
8f72022cba33a58ad15700692710f0110d65a2a8a9f2cd7e52384d6ba1245c3b
-
SHA512
5dd4076c0ccff02340f74755224f1a5257d0bf66d526d9d76bacb10c296a5fe59da0dc17a7d081a5b0d47cfa3ab0a48174d37f6bff260b0ef4dd1f9a757075cd
-
SSDEEP
768:RdRuW9KK9r979RYnUj9KK9r979wUmUvkC9blBHjI:PRuWLJlDYnUjLJli7snxU
Score
6/10
Malware Config
Signatures
-
Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\Dolphin-x64\Sys\GameSettings\GALE01r2.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
32KB
-
Filesize
2.9MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB