Overview
overview
3Static
static
1Ghosts of ...ck.cmd
windows10-2004-x64
3Ghosts of ...ck.cmd
windows11-ltsc_2024-x64
3Ghosts of ...es.cmd
windows10-2004-x64
3Ghosts of ...es.cmd
windows11-ltsc_2024-x64
3Ghosts of ...C3.ps1
windows10-2004-x64
3Ghosts of ...C3.ps1
windows11-ltsc_2024-x64
3Ghosts of ...C3.ps1
windows10-2004-x64
3Ghosts of ...C3.ps1
windows11-ltsc_2024-x64
3Ghosts of ...C3.ps1
windows10-2004-x64
3Ghosts of ...C3.ps1
windows11-ltsc_2024-x64
3General
- Target Ghosts Of Dunwall Mod Pack V1.0.0 380 1 2026-08-06T06-35Z seVUJu5z6.zip
- Size 46.1MB
- Sample260808-d2rkesgr6y
- SHA256 ebd6d4e41f934c6bba82cb4cbf0da23c1eac0cbecd4c22e7719ccbb4c75214a2
- MD5 0521897ac5ce2788db249a35cfbb3e04
- SHA1 7074aa21194ceb730e5f7b946a97c191dfb54285
- SHA512 4aa71a19a814b60de5b87ff4769cf5f9387493faca01f2f53c290fd20f2513af9803dc502daf7b2df0a7e5f5b2d6ef89e34a134e0905b44ce43a54371b7fda13
- SSDEEP 786432:DKj0KrpKVmKrj25kKcWKxzxKOcKTEKl8KE4KRKXva5OA2BvIKakKJ/bKZ6TL3P4y:DpUNiFW+SHDK00A2lIEKpL3QEm/PtYao
- TLSH T1C1B7335FD34921DCC9876DFD188E80D66E5813543839AFAAF86D25DBE2817E2FF80016
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Install Ghosts of Dunwall Mod Pack.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Install Ghosts of Dunwall Mod Pack.cmd
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Restore Original Dishonored Files.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Restore Original Dishonored Files.cmd
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Tools/Install-GhostsOfDunwall-v1.0.0-RC3.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Tools/Install-GhostsOfDunwall-v1.0.0-RC3.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Tools/Restore-GhostsOfDunwall-v1.0.0-RC3.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Tools/Restore-GhostsOfDunwall-v1.0.0-RC3.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Tools/Validate-PowerShellScript-RC3.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Ghosts of Dunwall Mod Pack v1.0.0/Tools/Validate-PowerShellScript-RC3.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Ghosts of Dunwall Mod Pack v1.0.0/Install Ghosts of Dunwall Mod Pack.cmd
- Size 982B
- SHA256 e527bc1cab1a1c5d05aa6e8de2236a1f4210bc44c94e829788315ad7d92dadd9
- MD5 51af77bd2d6799ddcd1d101efa4d71f6
- SHA1 bb51d13c88c69cd6cea4fded3cf0d106f4ec0760
- SHA512 3460aaef17af1f07ed25b6539f22fda7a756f9445866a1ccb9aa665529d5d09d3a464af27ab810f1e0f3470c2a16e9055105ffcc76bec847351bb54fcd2bf499
- TLSH T1DF11CE283A40E37E35BACF2B8169C61AE964D04F0111CEAE3956C9742F7E18AC9F12C0
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Ghosts of Dunwall Mod Pack v1.0.0/Restore Original Dishonored Files.cmd
- Size 980B
- SHA256 1f05a87e10d09470b51802dc3ce28cba80e7e6b8bb5cff8e26cb772b63b82a68
- MD5 93dd90002d677fd416eaacf6162b9e95
- SHA1 523127212f901b0d3673d6fd8a186a91de49e107
- SHA512 51421f5a9ac5dd7b7cf56d7023ee899a61476f643fcbcebcbb647226d42f3dc4c718702621db6c5a27d644fab532f11ebcd08d8d4461652b11fb58ad38ce990d
- TLSH T18311CE343644E3BE25BACE2B50A8C61AE974908F0211CEAE7965C9743F7D18ACAF11C0
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Ghosts of Dunwall Mod Pack v1.0.0/Tools/Install-GhostsOfDunwall-v1.0.0-RC3.ps1
- Size 140KB
- SHA256 a69b2d1e5cf2e899bb155e0fc6df206f3c178742ab8176f0489aac46aee573b0
- MD5 0b04d041d30212c4176fcede0880d9b7
- SHA1 9ac9414e5420dc96d92c33232869da8c7ac14ed5
- SHA512 1d8dc8769b3e4e24530dd9455ff54fd55e27ef3caad8aa258ee9c11c634f3ab17db17b1edab19d81a347ba69db9b35eea3efa33a3a84e873ada80da9eebf902c
- SSDEEP 3072:mhyPe5HCOBT8IBB5Ozxn1eBBpIqEby/CzA8d/Sdi2lqea/a0jvnWiZM/aH4N8RzF:mhyPe5HCUwGB5OzfeBBpIqEby/CzA8dJ
- TLSH T1A2E3E629B60544656AB127F996D60060FF6B002FA43901E0F9EEA0C47FF615D0B7DFAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Ghosts of Dunwall Mod Pack v1.0.0/Tools/Restore-GhostsOfDunwall-v1.0.0-RC3.ps1
- Size 26KB
- SHA256 bba7ba13a2f4139bd6184b5f17014cde31c52c9605dd3d411d05e76d898a6e9b
- MD5 6dc9efed5aab66c635914d4a4d22018a
- SHA1 3bfdf38f392e174a12d876d5c5863ac34619ce19
- SHA512 f2501f3852a5aac696c0dc72a6ba251c1d8af649365d07b6e900ce64003e1569905d3d2d9da10adaba8678cfe8b77ef1ab4b16c97e9a5c973c14c357f7a652ff
- SSDEEP 768:HemqkdMGz4MRkgmcz0psWL0e+asQtsExvcmaNaBu1p06UcHAbzl8ZRhwuf:HemqkdMGz4MRkgPz0psWLiB71Ql8Z
- TLSH T13CC2A675700444660CB62BBA75D24610FA3FC06B45F49A90FADDE0E83FF61190B7AFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Ghosts of Dunwall Mod Pack v1.0.0/Tools/Validate-PowerShellScript-RC3.ps1
- Size 5KB
- SHA256 d3361540cb289ea8e32c304a89b637a13b11468e8d8415ca2d534d966d65d22b
- MD5 e70d1b488b69e419ca7e4638a5c83824
- SHA1 6909239d1589e655eee9a1c2aaaf5b1873a437eb
- SHA512 d207ff752837ac1db75d9856339805b35fcd67330804bff3f7e11f67953caa2a2d4681ecaeb53950ed7a2c3ba196b86ad83c3941aabba1f316e3ffa617176a34
- SSDEEP 96:qHzGyvcRfRgNn8TQ1dmEMKdiTQ89ZJGQkdX8B860hijM:qSysyN8TQ1kEM1Q8rJGBXGNjM
- TLSH T19AC1951CBB05493551F32B7FA1B28D1CDB1A516B52508B467D2EA4946FF002B0BA7E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10