Malicious
3a456bb8ba3159fa641744d6c515aa3d
PowerShell
MD5: 3a456bb8ba3159fa641744d6c515aa3d
Size: 1.08 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.08 KB · 1,082 B
First seen
2026-08-08 09:00 · 2 months ago
Last seen
2026-08-08 09:00 · 2 months ago
Last analysis
2026-08-08 09:00 · 2 months ago
Hashes
MD5
3a456bb8ba3159fa641744d6c515aa3d
Sha1
ab544e39a87e576286472cb8ed1573a870061a1e
Sha256
b44b849f45d082049e92760023a55941e8acf67e2c3aae3ec44669aa71edd5fc
Sha384
51f4652938bb770d2e96ec823976d658ed782518bff56bbbbdf4236e30f7d45d16a898210f969b53296d3057063910b2
Sha512
f62dcc4a1af8b124b1725522188b13d6e9d6d7e5a3136580bc7821109dc273ae017165d57da917c88a786266ac91a922d646a3d8aa0a0274d93dce69a3df8c61
SSDeep
24:euCT9Fr5HS30uGGI8n2DOUwsrnySVjX9FBKUdDSVSIDSpChAFVL:ezT915HSvIACO0nV5Fc+VL
TLSH
D01179829D16A059EF91F957F441D741C061103B607B5A10769CD2189DB4E94FBF48D6
6 malicious · 6 files
PS13a456bb8ba3159fa641744d6c515aa3dT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential6 malicious · 6 files
PS13a456bb8ba3159fa641744d6c515aa3dT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
3a456bb8ba3159fa641744d6c515aa3d › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account