Analysis
-
max time kernel
38s -
max time network
43s -
platform
windows7_x64 -
resource
win7-20220812-es -
resource tags
-
submitted
31/12/2022, 18:59
General
-
Target
Warlock_and_Boobs_v0.350.2_Gallery_Mod/install.ps1
-
Size
1KB
-
MD5
1bc7590a7d27354843e218d4ed0bb9a0
-
SHA1
36e2f70398083f861d3c5dbba30dd75f2ea0b5b9
-
SHA256
2f1d167991635b7c83cd500cb6c13cc23c5f84cb8f978a6edc95b156adfa6a12
-
SHA512
fb261d40ab589d756308746584c8e4b6d87a9d9bbaed97213ef0ef42003ee67be6fbaef7ece4b222664c85496bae6f79f31b6ed89d37d315b49460244d69857c
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\Warlock_and_Boobs_v0.350.2_Gallery_Mod\install.ps11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
10.1MB
-
Filesize
11.4MB
-
Filesize
12KB
-
Filesize
3.0MB
-
Filesize
12KB
-
Filesize
124KB