Malicious
Malicious

3a456bb8ba3159fa641744d6c515aa3d

PowerShell
MD5: 3a456bb8ba3159fa641744d6c515aa3d
Size: 1.08 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3a456bb8ba3159fa641744d6c515aa3d
Sha1 ab544e39a87e576286472cb8ed1573a870061a1e
Sha256 b44b849f45d082049e92760023a55941e8acf67e2c3aae3ec44669aa71edd5fc
Sha384 51f4652938bb770d2e96ec823976d658ed782518bff56bbbbdf4236e30f7d45d16a898210f969b53296d3057063910b2
Sha512 f62dcc4a1af8b124b1725522188b13d6e9d6d7e5a3136580bc7821109dc273ae017165d57da917c88a786266ac91a922d646a3d8aa0a0274d93dce69a3df8c61
SSDeep 24:euCT9Fr5HS30uGGI8n2DOUwsrnySVjX9FBKUdDSVSIDSpChAFVL:ezT915HSvIACO0nV5Fc+VL
TLSH D01179829D16A059EF91F957F441D741C061103B607B5A10769CD2189DB4E94FBF48D6
3a456bb8ba3159fa641744d6c515aa3d
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3a456bb8ba3159fa641744d6c515aa3d
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
3a456bb8ba3159fa641744d6c515aa3d › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙