868d61ab45680a6fb0ee0cd78f47a39858a30e326c97ae8e1ff5d0937b6e54fc

Analysis

Target

dhl/dhl/vendor/composer/autoload_real.php.ps1
Size

2KB
MD5

ac63d45a3444aa7f71a6031d270bff31
SHA1

508403a91df0f4954cb6344e40709dcf8162ba17
SHA256

d513599a87b9e1a731d1b43232eaf69f2ac41141a06c76cf6cd9039d518d0680
SHA512

a25466c3be942260925a7c2a72be34f626a11607b2e900c337e92385851540f1d870ab1f7db62954fb9d905f82f3e97489581f1eee0d821c7dee0316c89b4622

Score

1^/10

Suspicious behavior: EnumeratesProcesses 3 IoCs

Processes:

powershell.exe

pid process

800 powershell.exe
800 powershell.exe
800 powershell.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

powershell.exe

description pid process

Token: SeDebugPrivilege 800 powershell.exe

description	pid	process
Token: SeDebugPrivilege	800	powershell.exe

memory/800-121-0x000001DA6A8C0000-0x000001DA6A8C1000-memory.dmp

Filesize
4KB

Download
memory/800-124-0x000001DA68AB0000-0x000001DA68AB2000-memory.dmp

Filesize
8KB

Download
memory/800-126-0x000001DA68AB3000-0x000001DA68AB5000-memory.dmp

Filesize
8KB

Download
memory/800-127-0x000001DA6B3B0000-0x000001DA6B3B1000-memory.dmp

Filesize
4KB

Download
memory/800-140-0x000001DA68AB6000-0x000001DA68AB8000-memory.dmp

Filesize
8KB

Download