Deep Malware Analysis of 40253da8e83ab369df1bbdee532d8707 | md5: 40253da8e83ab369df1bbdee532d8707 | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	40253da8e83ab369df1bbdee532d8707
Sha1	79ee9c555eebfd7b23606128c2fd050ca5134b47
Sha256	d720c70eb7a545bc1681ec12edddfb94caa42768aa81faf594477b8bc1328e18
Sha384	9a2b132c24265219d655a3f5719dcd6bfbc9a7d054709c90df8b2b69b4c69a523a5d2b7b0ac96e45641aeacac1d4ce8c
Sha512	f01cf3b527c3caf2d9f6604c3292ddd99a850bb2499fded521cc6bc3f6dbf0bbfe96f3a0c83153c8a8cb69a7d0ba3eaa450060c8d532c480f71409fdf05dcb45
SSDeep	3:VSJJFIGFGMFI1oM3KAJJFId1sqPJH0cVERvBuIFlECL0n:s8GFGMFI1R3Ks8zsO0cKTr0n

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

Start-huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

-args huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential