Overview

overview

3

Static

static

dhl/dhl/an...hp.ps1

windows7_x64

1

dhl/dhl/an...hp.ps1

windows10_x64

1

dhl/dhl/co...hp.ps1

windows7_x64

1

dhl/dhl/co...hp.ps1

windows10_x64

1

dhl/dhl/co...hp.vbs

windows7_x64

1

dhl/dhl/co...hp.vbs

windows10_x64

1

dhl/dhl/fo...vg.xml

windows7_x64

1

dhl/dhl/fo...vg.xml

windows10_x64

1

dhl/dhl/im...vg.xml

windows7_x64

1

dhl/dhl/im...vg.xml

windows10_x64

1

dhl/dhl/index.php.js

windows7_x64

1

dhl/dhl/index.php.js

windows10_x64

1

dhl/dhl/js/fa.js

windows7_x64

1

dhl/dhl/js/fa.js

windows10_x64

1

dhl/dhl/js...min.js

windows7_x64

1

dhl/dhl/js...min.js

windows10_x64

1

dhl/dhl/js...min.js

windows7_x64

1

dhl/dhl/js...min.js

windows10_x64

1

dhl/dhl/js...eps.js

windows7_x64

1

dhl/dhl/js...eps.js

windows10_x64

1

dhl/dhl/js/main.js

windows7_x64

dhl/dhl/js/main.js

windows10_x64

1

dhl/dhl/logs.html

windows7_x64

1

dhl/dhl/logs.html

windows10_x64

1

dhl/dhl/ve...min.js

windows7_x64

1

dhl/dhl/ve...min.js

windows10_x64

1

dhl/dhl/ve...hp.ps1

windows7_x64

1

dhl/dhl/ve...hp.ps1

windows10_x64

3

dhl/dhl/ve...hp.ps1

windows7_x64

1

dhl/dhl/ve...hp.ps1

windows10_x64

1

dhl/dhl/ve...php.js

windows7_x64

1

dhl/dhl/ve...php.js

windows10_x64

1

Analysis

  • max time kernel
    28s
  • max time network
    133s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    30-08-2021 05:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dhl/dhl/core/user_agent.php.vbs

  • Size

    11KB

  • MD5

    bac42cf5a9bb0f3984d1f31ac4c4c603

  • SHA1

    722934a1f632c073c446c0a2b2aff32391e1bc9d

  • SHA256

    8ebfae5442387a298e5224a02a91e6a9a1c7c4329c41665626cf90b112188980

  • SHA512

    39a3b4e3a72f8ac9a0f310fb86c20da63c2b77a43a7b5b7360918f4a8810ea41bf408041bc85fc52cdd13dceac4e88aadda333ec46116ef49c6ba0d6d014da15

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\dhl\dhl\core\user_agent.php.vbs"
    1⤵
      PID:4044

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads