Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
28/08/2026, 16:04
General
- Target code.ps1
- Size 3B
- Sample260828-th18hsdf33
- SHA256 24d4b96f58da6d4a8512313bbd02a28ebf0ca95dec6e4c86ef78ce7f01e788ac
Malware Config
Signatures
- Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\code.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2968-0-0x00007FFC1C67F000-0x00007FFC1C680000-memory.dmp
memory/2968-4-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-3-0x000001A7547D0000-0x000001A7547F2000-memory.dmp
memory/2968-5-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-6-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-7-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-11-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-12-0x000001A76CD00000-0x000001A76CDB2000-memory.dmp
memory/2968-10-0x000001A76CCE0000-0x000001A76CCFE000-memory.dmp
memory/2968-13-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-14-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-15-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-16-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-17-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-18-0x000001A76CCC0000-0x000001A76CCCA000-memory.dmp
memory/2968-19-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-20-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-21-0x000001A76CDE0000-0x000001A76CDFE000-memory.dmp
memory/2968-22-0x000001A76CDC0000-0x000001A76CDCA000-memory.dmp
memory/2968-23-0x000001A76D280000-0x000001A76D29C000-memory.dmp
memory/2968-25-0x000001A76D260000-0x000001A76D266000-memory.dmp
memory/2968-26-0x000001A76D270000-0x000001A76D27A000-memory.dmp
memory/2968-24-0x000001A76CDD0000-0x000001A76CDD8000-memory.dmp
memory/2968-29-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp
memory/2968-28-0x00007FFC1C4F0000-0x00007FFC1CE94000-memory.dmp