Deep Malware Analysis of 173f043522d170956aff5d683cb1ddb7 | md5: 173f043522d170956aff5d683cb1ddb7 | PowerShell | Powershell: Hidden Execution | T1059.001 | T1027 | DeObfuscated | Contains Base64 Block | Base64 Block

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	173f043522d170956aff5d683cb1ddb7
Sha1	30cd6f7e30043522335d01d668b95b00f95d8420
Sha256	9cbbf013baf9d740a39159488843691a49dc89cdd79a69858ead44590611ea81
Sha384	3b719edef3dbefa15bdf24a73eeb5977e839aae963f4e1af16d3619a4ccb394c3ffc2ee581fdc5a65e843733affa1f34
Sha512	22de3413d7bcc8144506d829815515c94c687e15b8383c53abd3e613e27b50f43dbc4e41d06df5e45c74b033109753c8ca61001dfe56954f01680c4c0042a7d1
SSDeep	96:Lz485kpFHzVuXcqT+dkvxVscqqHfEWShMfcq9NvUf0wcqS3fnDQO31oUZ2Q9eHcB:ICkpFHRuXcqKdyVscqZMfcq9mcwcqS3/
TLSH	E9B129859C8F3D4CDB642A3620DD98E85F2D438E1A2AAD58610FE18C1A025299CED5FF

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

-argumhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential