Malicious
PowerShell
MD5: 07d6b88c7612dbee3d878a75c1b508cb
Size: 76.72 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 07d6b88c7612dbee3d878a75c1b508cb |
| Sha1 | 0be0f5ab62bcd97303aab8d2f9bd139629600b07 |
| Sha256 | 3ff4f41605d3b7d53e62005719c41423921c57ded7a72c2c6679e51e6ab89cc9 |
| Sha384 | 2382fe50de84b615521d14f4588a5ab51ff51c315a8f5d27c93280d3fa3795fc27b2e1c22194f8762d175cbcaa446cac |
| Sha512 | 94b4f6b842261dc3835a5ae4d50a817348c4ccb5811810a18f62ebf1263a2040a0698da0677b36d4fc711f386dce25d49a232001dd9016fb2453950c561f09be |
| SSDeep | 1536:87CERKmTMVPHkK+66JXqhtHyz8cs2zTlqNIACS7u3/IwOheu:87CERZTMVPETpJXqLyn7lSIs7MI1gu |
| TLSH | 5A7301313A9466D8319EC8B30F49E45C3AD8A223F259AD5FF68DC0CDBE4B2AC55E4435 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1105
Shape
scr:ps1
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Deobfuscated PowerShell
UNKNWOWNmalicious
ise | huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
(?i)
huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
ise | huhuhuhuhuhuhu
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential