Malicious
PowerShell
MD5: 1c2270353e7463f108274bf46f15432a
Size: 3.28 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
3.28 MB · 3,279,634 B
First seen
2026-08-22 11:15 · 2 months ago
Last seen
2026-08-22 11:15 · 2 months ago
Last analysis
2026-09-02 11:38 · one month ago
Hashes
MD5
1c2270353e7463f108274bf46f15432a
Sha1
492fba1efa58388705f0711b1e4ffef166d1d077
Sha256
f794036bb19b2c3880020071c559a1ae4879a7f8c6bf251b12ad6e662ee5c6f1
Sha384
6c647321cf46aa6eb183330fd568559467b80447cccda4d7d223e43588267d047c4f2df42de446ff77d1e5ba6891d5e4
Sha512
81bc21ddf8baf5e772d82e95bfa82519238bb8f43b2fcdb29d4f67423113664af8f1f4b0259c39750656690963e79247f6f328eb9af9b26138dec3556ed1ef67
SSDeep
24576:3zyybXVgrEXKGsfQOJACG8M2K9auIY3Hlr79xV:3z2rcKG6+nBD
TLSH
E3E514789E8A526D633ACF55C1CE20ABD169B207238E44D315C30ECF5FAB1666BC643D
4 malicious · 5 files
PS11c2270353e7463f108274bf46f15432aT1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1105 · T1059.001 · T1059.007
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1105>scr:js~T1027~T1059.001~T1059.007~T1105
Shape
scr:ps1>scr:js
malicious
2 nodes