Overview
overview
3Static
static
dhl/dhl/an...hp.ps1
windows7_x64
1dhl/dhl/an...hp.ps1
windows10_x64
1dhl/dhl/co...hp.ps1
windows7_x64
1dhl/dhl/co...hp.ps1
windows10_x64
1dhl/dhl/co...hp.vbs
windows7_x64
1dhl/dhl/co...hp.vbs
windows10_x64
1dhl/dhl/fo...vg.xml
windows7_x64
1dhl/dhl/fo...vg.xml
windows10_x64
1dhl/dhl/im...vg.xml
windows7_x64
1dhl/dhl/im...vg.xml
windows10_x64
1dhl/dhl/index.php.js
windows7_x64
1dhl/dhl/index.php.js
windows10_x64
1dhl/dhl/js/fa.js
windows7_x64
1dhl/dhl/js/fa.js
windows10_x64
1dhl/dhl/js...min.js
windows7_x64
1dhl/dhl/js...min.js
windows10_x64
1dhl/dhl/js...min.js
windows7_x64
1dhl/dhl/js...min.js
windows10_x64
1dhl/dhl/js...eps.js
windows7_x64
1dhl/dhl/js...eps.js
windows10_x64
1dhl/dhl/js/main.js
windows7_x64
dhl/dhl/js/main.js
windows10_x64
1dhl/dhl/logs.html
windows7_x64
1dhl/dhl/logs.html
windows10_x64
1dhl/dhl/ve...min.js
windows7_x64
1dhl/dhl/ve...min.js
windows10_x64
1dhl/dhl/ve...hp.ps1
windows7_x64
1dhl/dhl/ve...hp.ps1
windows10_x64
3dhl/dhl/ve...hp.ps1
windows7_x64
1dhl/dhl/ve...hp.ps1
windows10_x64
1dhl/dhl/ve...php.js
windows7_x64
1dhl/dhl/ve...php.js
windows10_x64
1Analysis
-
max time kernel
7s -
max time network
44s -
platform
windows7_x64 -
resource
win7v20210408 -
submitted
30-08-2021 05:57
Static task
static1
Behavioral task
behavioral1
Sample
dhl/dhl/antibot.php.ps1
Resource
win7v20210408
Behavioral task
behavioral2
Sample
dhl/dhl/antibot.php.ps1
Resource
win10v20210408
Behavioral task
behavioral3
Sample
dhl/dhl/core/autoload.php.ps1
Resource
win7v20210408
Behavioral task
behavioral4
Sample
dhl/dhl/core/autoload.php.ps1
Resource
win10v20210408
Behavioral task
behavioral5
Sample
dhl/dhl/core/user_agent.php.vbs
Resource
win7v20210408
Behavioral task
behavioral6
Sample
dhl/dhl/core/user_agent.php.vbs
Resource
win10v20210408
Behavioral task
behavioral7
Sample
dhl/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.svg.xml
Resource
win7v20210408
Behavioral task
behavioral8
Sample
dhl/dhl/fonts/material-design-iconic-font/fonts/Material-Design-Iconic-Font.svg.xml
Resource
win10v20210408
Behavioral task
behavioral9
Sample
dhl/dhl/images/img.svg.xml
Resource
win7v20210408
Behavioral task
behavioral10
Sample
dhl/dhl/images/img.svg.xml
Resource
win10v20210408
Behavioral task
behavioral11
Sample
dhl/dhl/index.php.js
Resource
win7v20210408
Behavioral task
behavioral12
Sample
dhl/dhl/index.php.js
Resource
win10v20210408
Behavioral task
behavioral13
Sample
dhl/dhl/js/fa.js
Resource
win7v20210408
Behavioral task
behavioral14
Sample
dhl/dhl/js/fa.js
Resource
win10v20210408
Behavioral task
behavioral15
Sample
dhl/dhl/js/jquery-3.3.1.min.js
Resource
win7v20210408
Behavioral task
behavioral16
Sample
dhl/dhl/js/jquery-3.3.1.min.js
Resource
win10v20210408
Behavioral task
behavioral17
Sample
dhl/dhl/js/jquery-ui.min.js
Resource
win7v20210408
Behavioral task
behavioral18
Sample
dhl/dhl/js/jquery-ui.min.js
Resource
win10v20210408
Behavioral task
behavioral19
Sample
dhl/dhl/js/jquery.steps.js
Resource
win7v20210408
Behavioral task
behavioral20
Sample
dhl/dhl/js/jquery.steps.js
Resource
win10v20210408
Behavioral task
behavioral21
Sample
dhl/dhl/js/main.js
Resource
win7v20210408
Behavioral task
behavioral22
Sample
dhl/dhl/js/main.js
Resource
win10v20210408
Behavioral task
behavioral23
Sample
dhl/dhl/logs.html
Resource
win7v20210408
Behavioral task
behavioral24
Sample
dhl/dhl/logs.html
Resource
win10v20210408
Behavioral task
behavioral25
Sample
dhl/dhl/vendor/bootrap/js/bootstrap.min.js
Resource
win7v20210408
Behavioral task
behavioral26
Sample
dhl/dhl/vendor/bootrap/js/bootstrap.min.js
Resource
win10v20210408
Behavioral task
behavioral27
Sample
dhl/dhl/vendor/composer/ClassLoader.php.ps1
Resource
win7v20210408
Behavioral task
behavioral28
Sample
dhl/dhl/vendor/composer/ClassLoader.php.ps1
Resource
win10v20210408
Behavioral task
behavioral29
Sample
dhl/dhl/vendor/composer/autoload_real.php.ps1
Resource
win7v20210408
Behavioral task
behavioral30
Sample
dhl/dhl/vendor/composer/autoload_real.php.ps1
Resource
win10v20210408
Behavioral task
behavioral31
Sample
dhl/dhl/vendor/guzzlehttp/guzzle/src/Client.php.js
Resource
win7v20210408
Behavioral task
behavioral32
Sample
dhl/dhl/vendor/guzzlehttp/guzzle/src/Client.php.js
Resource
win10v20210408
General
-
Target
dhl/dhl/vendor/composer/ClassLoader.php.ps1
-
Size
13KB
-
MD5
a0899dd7d97c25fe1d872a542afa6081
-
SHA1
886347a1ce3d2843dd58a5b2a96d894b330bcf84
-
SHA256
e4fc4d4487a4d766d3ef14606fa0d8ff09dd7f3f0885425803d7aa7fc68e2c3d
-
SHA512
6d630ae5c62bd43ae490e02b0e1eab6f9a4b92364b617e0dbb4404ff11bc33db238568dcc3df9d8de616f191109853bf9d9a408030f1252fa7e420e5321227af
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
powershell.exepid process 468 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
powershell.exedescription pid process Token: SeDebugPrivilege 468 powershell.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/468-60-0x000007FEFB531000-0x000007FEFB533000-memory.dmpFilesize
8KB
-
memory/468-61-0x0000000001DC0000-0x0000000001DC1000-memory.dmpFilesize
4KB
-
memory/468-62-0x000000001AB30000-0x000000001AB31000-memory.dmpFilesize
4KB
-
memory/468-63-0x00000000025A0000-0x00000000025A1000-memory.dmpFilesize
4KB
-
memory/468-64-0x000000001A900000-0x000000001A902000-memory.dmpFilesize
8KB
-
memory/468-65-0x000000001A904000-0x000000001A906000-memory.dmpFilesize
8KB
-
memory/468-66-0x00000000025D0000-0x00000000025D1000-memory.dmpFilesize
4KB