Deep Malware Analysis of 3631f1fd129c35f2cc55062fcd88f083 | md5: 3631f1fd129c35f2cc55062fcd88f083 | PowerShell | T1059.001 | T1105

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3631f1fd129c35f2cc55062fcd88f083
Sha1	d13599bca18f52e12c6ca5d3ffd1ebb0ac633b1f
Sha256	9bffb574f40161e6dedf9652743b0e55e52bcad0a17b0e6ba3bb29c06472f1ef
Sha384	255e00fbdc0c40d101ede306f602aed6fe973fe8969d40bff53ad15f4dfc61561d74506d764051c7eeb4c823b993eb67
Sha512	f0549e54489d3e7cd91800030d373580fa8567da3c314f5ac3e5d1c55475f67d54df8c6d7bb1e349d4388051463a745986bbd812a18f4748f3b51152be5665e3
SSDeep	12288:F9ibm+TZpoyKlnA5NzT6Kbyqpx6hrcDGUpDNeeALdbEnvuiW9G0sZdP3NTAOFOKe:SwL
TLSH	2F6512523651FD7D029693B16E1646F0A46ACA40CFDF8556F24DCE88B14EC863AFA3C3

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1059.001~T1105

Shape scr:ps1

malicious 1 nodes

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu
URL in PowerShell #2	https:huhuhuhuhuhuhuhuhuhuhu
URL in PowerShell #3	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

URL in PowerShell #2 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential