Analysis
-
max time kernel
37s -
max time network
130s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
30-08-2021 05:57
General
-
Target
dhl/dhl/antibot.php.ps1
-
Size
4KB
-
MD5
242b67ece59dee8bf7c3358d331a48a8
-
SHA1
58c067d46570c921107ff2de496d41b61986029f
-
SHA256
e1303d4fc0d8ea03e104b686347af6795210d8187342cd2181814f7d1f0d4f7b
-
SHA512
be6e2dd22fa9e3fd7204d69632f5f15de3deaaf7d2d5bcbc16028747180c1be2b7210ec00668e159b6125760a152d8dfef76f6be00efa1aaebce5c3e5231351d
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\dhl\dhl\antibot.php.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB