Malicious
Malicious

40253da8e83ab369df1bbdee532d8707

PowerShell
MD5: 40253da8e83ab369df1bbdee532d8707
Size: 118 B
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 40253da8e83ab369df1bbdee532d8707
Sha1 79ee9c555eebfd7b23606128c2fd050ca5134b47
Sha256 d720c70eb7a545bc1681ec12edddfb94caa42768aa81faf594477b8bc1328e18
Sha384 9a2b132c24265219d655a3f5719dcd6bfbc9a7d054709c90df8b2b69b4c69a523a5d2b7b0ac96e45641aeacac1d4ce8c
Sha512 f01cf3b527c3caf2d9f6604c3292ddd99a850bb2499fded521cc6bc3f6dbf0bbfe96f3a0c83153c8a8cb69a7d0ba3eaa450060c8d532c480f71409fdf05dcb45
SSDeep 3:VSJJFIGFGMFI1oM3KAJJFId1sqPJH0cVERvBuIFlECL0n:s8GFGMFI1R3Ks8zsO0cKTr0n
40253da8e83ab369df1bbdee532d8707
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
-args huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
40253da8e83ab369df1bbdee532d8707
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
40253da8e83ab369df1bbdee532d8707 › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
-args huhuhuhuhuhuhuhuhuhuhu
40253da8e83ab369df1bbdee532d8707 › [PowerShell Command] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙