General
- Target deepseek_powershell_20260714_86cda1.ps1
- Size 7KB
- Sample260714-s33fmsfy2q
- SHA256 7d31b8b7500f349e6eba24d41f6fecf3603042212cfaf3c5e236faa5ebd8429c
Score
10/10
Malware Config
Targets
-
- Target deepseek_powershell_20260714_86cda1.ps1
- Size 7KB
- SHA256 7d31b8b7500f349e6eba24d41f6fecf3603042212cfaf3c5e236faa5ebd8429c
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Modifies boot configuration data using bcdedit
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Drops startup file
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1