Malicious
PowerShell
MD5: 0d9c6dbf1b1463a75b127a9db1d17014
Size: 2.75 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
2.75 MB · 2,753,957 B
First seen
2026-10-21 12:01 · 4 days ago
Last seen
2026-10-21 12:01 · 4 days ago
Last analysis
2026-10-21 12:07 · 4 days ago
Hashes
MD5
0d9c6dbf1b1463a75b127a9db1d17014
Sha1
13db7693eb6c27108eb78ecbbad53dbe5fe7b6d0
Sha256
ff2286056596c555d7010e471c849b645b7164c721aba3655fbae0cd0f965f31
Sha384
cdd6a8223c020e13d7975a914b1a5db4114906ca2ff34ba2a31736c34f06888f8d9780cdd1179997c30123d4020f4a69
Sha512
c90e3bff7a058fd6f2ffcde9c37ca2ac7a90d535ab7873badea1656d63e2e143db5317b8df7daebe63fee7de3991fbf530e4e13052a95860a939580810178ebd
SSDeep
24576:g/wYl3BcoQecF2BukhSPMUgpvdsrgkDnSthj+NS6G7bbTWCFtVbn0KAmMxaTEYlq:Y6peYkQ4ifnSt4G3fTeaAPZIenBxVqI
TLSH
04D51217CE06FE5E4938585EAE94CD857873DF02C0B8A1F1344F28EEE91F915296E26C
3 malicious · 3 files
PS10d9c6dbf1b1463a75b127a9db1d17014T1027 · T1059.001 · T1059.007
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1059.007
Shape
scr:ps1
malicious
1 nodes