Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
20/09/2026, 22:33
General
- Target Microsoft.exe
- Size 34KB
- Sample260920-2gstrade75
- SHA256 b96de86c33ee90bb9bc6af9d9eb774e245603bac1a8c19dc0456a0e7f767a4bc
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Microsoft.exe"C:\Users\Admin\AppData\Local\Temp\Microsoft.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_jwt0dl3k.joh.ps1
memory/5396-0-0x0000000000D30000-0x0000000000D3E000-memory.dmp
memory/5396-8-0x000000001EC80000-0x000000001EC90000-memory.dmp
memory/5396-9-0x000000001B8A0000-0x000000001B8C2000-memory.dmp
memory/5396-10-0x000000001EC80000-0x000000001EC90000-memory.dmp