Malicious
37e2972a36b80d2178ea9761f875ccf9
PowerShell
MD5: 37e2972a36b80d2178ea9761f875ccf9
Size: 7.92 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
7.92 KB · 7,921 B
First seen
2026-10-23 12:15 · 2 days ago
Last seen
2026-10-23 12:15 · 2 days ago
Last analysis
2026-10-23 12:15 · 2 days ago
Hashes
MD5
37e2972a36b80d2178ea9761f875ccf9
Sha1
4a34e947564c45f7fd96e9f107d4aa28d26ccdc1
Sha256
c94e011b632dc2100d1c58583074cb8575dd54375b6f86d5d50ee318e4fccae3
Sha384
5230dac2a8933d80b553d24b7e047e336efd08188ae3215c00a97b7021db4e25f8734610e186e2dea5076c407cf7948e
Sha512
05a102226a9cb0caeab6e5bbf4648312180b01aa4973e61c1f677fe01c5ec2c605388dd58189e38f97c5a2eaeadd74b4d2d5bfea4643c0dc0744220e945e04bc
SSDeep
192:NsgI/POeo/WslT1bZFl/HyNSRmfiqFaUXsbwwb4:SgIHOBTdZGs8G4
TLSH
71F1E189AE569029DEB6F33DCF298609E72704270902E259B4DC82945FB109D83ECDFD
7 malicious · 7 files
PS137e2972a36b80d2178ea9761f875ccf9T1027 · T1059.001 · T1059.007
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1059.007
Shape
scr:ps1
malicious
1 nodes
7 malicious · 7 files
PS137e2972a36b80d2178ea9761f875ccf9T1027 · T1059.001 · T1059.007
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account