Analysis
-
max time kernel
9s -
max time network
50s -
platform
windows7_x64 -
resource
win7v20210408 -
submitted
30-08-2021 05:57
General
-
Target
dhl/dhl/vendor/composer/autoload_real.php.ps1
-
Size
2KB
-
MD5
ac63d45a3444aa7f71a6031d270bff31
-
SHA1
508403a91df0f4954cb6344e40709dcf8162ba17
-
SHA256
d513599a87b9e1a731d1b43232eaf69f2ac41141a06c76cf6cd9039d518d0680
-
SHA512
a25466c3be942260925a7c2a72be34f626a11607b2e900c337e92385851540f1d870ab1f7db62954fb9d905f82f3e97489581f1eee0d821c7dee0316c89b4622
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\dhl\dhl\vendor\composer\autoload_real.php.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
4KB