Malicious
PowerShell
MD5: 3151a35563e8b8721026a9a0516d8acf
Size: 2.1 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
2.1 MB · 2,100,940 B
First seen
2026-08-25 09:03 · 2 months ago
Last seen
2026-08-25 09:03 · 2 months ago
Last analysis
2026-09-02 11:38 · one month ago
Hashes
MD5
3151a35563e8b8721026a9a0516d8acf
Sha1
9da8e7805f4bbf546f5516e9b5e315db60a96e7c
Sha256
a0a25f00739e4e70522374d257eba1e2bd85193ade2680de51803f5901b5a408
Sha384
460f97f7d152072771aeee59d1440752f2ea3be05173713f323b35d54df89ef0708f8d739ff7b71d503e079dac76aa1b
Sha512
b40ca6a625a57b37d179413a3952fa31ee76fc8667acebc9a09d90f9426235400b438d6ce85fa8de5f0c7548a8385f0a0ff14e60940922a6ccc66845af7f6aee
SSDeep
3072:5c7cyWVw5rAAwNrafWZ5NDgBHOv3ee3FWtoFNU2DB2h8o1TxCKXigZfQJm4t/Ys9:UngraCKuvOe3sSFNU2DG8+uJZAz0J
TLSH
76A5B931AE3D467BAA3BFF1ACACD48B0C11C3327456F09AC11950DED27A3697A0C656D
4 malicious · 6 files
PS13151a35563e8b8721026a9a0516d8acfT1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1105 · T1059.001 · T1059.007
BIN[Base64-Block]
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1105>scr:js~T1027~T1059.001~T1059.007~T1105
Shape
scr:ps1>scr:js
malicious
2 nodes