Malicious
265c91f3133350d4d28732f58143e374
PowerShell
MD5: 265c91f3133350d4d28732f58143e374
Size: 503 B
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
503 B · 503 B
First seen
2026-10-19 23:45 · 6 days ago
Last seen
2026-10-19 23:45 · 6 days ago
Last analysis
2026-10-19 23:45 · 6 days ago
Hashes
MD5
265c91f3133350d4d28732f58143e374
Sha1
4e40f11cb2d19e6b9f4d0eeaec91f42bc19a5d61
Sha256
b4fdaf46a9817f828eb7bc29c9319953a9e06fba2bc2325c972bc25d4ed219d5
Sha384
281adf578ee6dc20dac8e628dfbcf0621a524ac5afbbddd8aabf553c30fcd8372c3c6fef9b2ac28ba1a10ab56e984fc7
Sha512
dffd43b2e71d20fc411325b9074b336e48b819aa34447ea03e9d021cf17bc6ab5ad9c58bc70c933eb7b82740c901eaf919a2ed24cb8aa92e8c6c726a2052acc1
SSDeep
12:H6QFMCFmQisMLVi+fOhX8DGiBG5MSMLTn80QpcR9kxPFyNA8:H6YvQbxGhQtatFyNp
TLSH
14F00E918698E238777164C5ACB79FADD8B782005980D2B1D1EEC504FB426675221ABB
3 malicious · 3 files
PS1265c91f3133350d4d28732f58143e374T1027 · T1105 · T1059.001
PS1[PowerShell Command]T1027 · T1105 · T1059.001
PS1[Deobfuscated PS]T1105 · T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1105
Shape
scr:ps1
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialDeobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
PS1265c91f3133350d4d28732f58143e374T1027 · T1105 · T1059.001
PS1[PowerShell Command]T1027 · T1105 · T1059.001
PS1[Deobfuscated PS]T1105 · T1059.001
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialDeobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
265c91f3133350d4d28732f58143e374 › [PowerShell Command]
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
265c91f3133350d4d28732f58143e374 › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account