Malicious
2f48f46fddcf94428569a311e0a35606
PowerShell
MD5: 2f48f46fddcf94428569a311e0a35606
Size: 736.63 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
736.63 KB · 736,628 B
First seen
2026-09-08 09:00 · one month ago
Last seen
2026-09-08 09:00 · one month ago
Last analysis
2026-09-08 09:00 · one month ago
Hashes
MD5
2f48f46fddcf94428569a311e0a35606
Sha1
99c84b70d0bd6bacab5b473ab16f34135eaf16a6
Sha256
e61ed4f393916be88461e2090a44b39928f50907b654183dc77bed10b63fdf4e
Sha384
5bfd0026fd9e96fec03ca95d3ffbc6a6423d3ecd80b124698e01824f42a7442d3dda5af820d5440739af13d2b3f8c386
Sha512
6237b56cff9b43f070d8c35c378942559f53387b0aa88ef630830990d1d1bb47736c50ac0aaa7b740eea2752b4f6082fe7a306c736c519a5399cd2411a1baa52
SSDeep
12288:BtuCMRuwzXi/F6bp0jVqgP7+f4BUfXwQVFRYNPt1a083y2Nk8N4lhOK:PuCMRuwzXwm05jP7P2AQXRYxLZ8iS6L
TLSH
ABF479606D203D3FA5F58C26DBA389910FCCE9D21A32B4EDF624256D0A6D322FD1953D
3 malicious · 3 files
PS12f48f46fddcf94428569a311e0a35606T1027 · T1059.001 · T1059.007
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1059.007
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
$PRAFZhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
PS12f48f46fddcf94428569a311e0a35606T1027 · T1059.001 · T1059.007
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
$PRAFZhuhuhuhuhuhuhuhuhuhuhu
2f48f46fddcf94428569a311e0a35606 › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account