Malicious
Malicious

2f48f46fddcf94428569a311e0a35606

PowerShell
MD5: 2f48f46fddcf94428569a311e0a35606
Size: 736.63 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2f48f46fddcf94428569a311e0a35606
Sha1 99c84b70d0bd6bacab5b473ab16f34135eaf16a6
Sha256 e61ed4f393916be88461e2090a44b39928f50907b654183dc77bed10b63fdf4e
Sha384 5bfd0026fd9e96fec03ca95d3ffbc6a6423d3ecd80b124698e01824f42a7442d3dda5af820d5440739af13d2b3f8c386
Sha512 6237b56cff9b43f070d8c35c378942559f53387b0aa88ef630830990d1d1bb47736c50ac0aaa7b740eea2752b4f6082fe7a306c736c519a5399cd2411a1baa52
SSDeep 12288:BtuCMRuwzXi/F6bp0jVqgP7+f4BUfXwQVFRYNPt1a083y2Nk8N4lhOK:PuCMRuwzXwm05jP7P2AQXRYxLZ8iS6L
TLSH ABF479606D203D3FA5F58C26DBA389910FCCE9D21A32B4EDF624256D0A6D322FD1953D
2f48f46fddcf94428569a311e0a35606
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001~T1059.007
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
$PRAFZhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
2f48f46fddcf94428569a311e0a35606
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
$PRAFZhuhuhuhuhuhuhuhuhuhuhu
2f48f46fddcf94428569a311e0a35606 › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙