Extracted

• • Target

    https://heaventools.lol/spoofer/download.html

  Score

  10^/10

  discoveryexecutionphishing

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Powershell Invoke Web Request.

    execution

  • A potential corporate email address has been identified in the URL: [email protected]

    phishing
  behavioral1