Malicious
PowerShell
MD5: 18a90565b3b764c19b7a876d9a7fcf85
Size: 73.96 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | 18a90565b3b764c19b7a876d9a7fcf85 |
| Sha1 | 0b985b8353c2fe8504230c2bff84fc9a987018bd |
| Sha256 | 0c55296904b2e395f3adbc99256954e81360c007e87b5be72fe989bc9ef2a505 |
| Sha384 | 34263ebe480a076e83c2e1a87c71ab1a0db66bc6902cc0468f93c1e87a074ed42df2f18f6d057fefa91b59565b8bd05d |
| Sha512 | 7fc60048b107f56056b2e26baf65c08fd17479bcd3edc1cfb304ebb65147c3e9898deb8f9ab932c0501a88b357816cc426c4c876c69f07ae6cc95d05a42cc81d |
| SSDeep | 192:uEAyyHjZnRupEl3wVmh5dK/Kl/jYKlBUKlqdJQ:NWjupqOI5dK/Kl/8KlSKl2Q |
| TLSH | 0B736B0B3B7D1114ACFAA6CCE87CA4EB0626E31507BFF1FF11B2652D959D84989C0792 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001
Shape
scr:ps1>scr:vbs>scr:ps1
malicious
3 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
" & vahuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
& var_huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential