Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
15-09-2024 00:42
General
-
Target
ajax/bizcate.ps1
-
Size
1KB
-
MD5
8af884399472c33011e2daa603f0e585
-
SHA1
1cc00700bbda2a51b120fe7af88287e72d9a7de2
-
SHA256
8a91c833e3644502e5f116d1fa3d39d456fbf9b51b17f8a5d478c78c575febc7
-
SHA512
5a7a9b3d6015c31732e6f36081c9bd59f2766833b63e27fc35e3ddefcd67d89f6d3123856b338c11262b58292df3cce8d08e903fcce106ec31490a73fb40c8d3
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\ajax\bizcate.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB