Malicious
PowerShell
MD5: 3a1c2f6f5209478a1cc7912553442c36
Size: 15.77 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
15.77 MB · 15,770,164 B
First seen
2026-08-06 08:45 · 2 months ago
Last seen
2026-08-06 08:45 · 2 months ago
Last analysis
2026-08-06 19:57 · 2 months ago
Hashes
MD5
3a1c2f6f5209478a1cc7912553442c36
Sha1
91cc62192f38eff5e984ba0bd4fd3f16ab784bd9
Sha256
368c897a66748451a53ac55e9d9844d7a1f4d9e961bbeddddcad844a0a5e21e5
Sha384
36958102f9fcad065e84fbef4c4818a8bb9d9db9c53ba0dbd4f4f14da69f169c5201f22b6e455a0c7c21f61f785fffab
Sha512
ade7f2af541e5e0aa56f8ec2c47b8432b553c8237bb14bf01e68d8bddf86f49d7ad408ed3c48cddde3bcd7dc58936c7bf343db958cd7de7dc1690b3b17ebda7b
SSDeep
192:KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKX:NUMXKMQXM42Ma5MOLtZFkqV9Qq3u
TLSH
B7F6D10501F18E3292B22C1D2DEA29712BBF616376BE71D1F342167DA950827C1FEB6D
4 malicious · 4 files
PS13a1c2f6f5209478a1cc7912553442c36T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes