Malicious
PowerShell
MD5: 40ed47767c280e5a182dfd0ea6d1cc8f
Size: 74.06 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | 40ed47767c280e5a182dfd0ea6d1cc8f |
| Sha1 | b016e17f801e8f0d7bbb161ecefae045aaca64f2 |
| Sha256 | b3a239b2b9f03411808ad477ec8b4bd91e5aeac1af2b0aaff99e448a16520eb3 |
| Sha384 | ca6c614c6a47bba8e3308d01bcc3e59d064e1446867482ed3234d1c0d2d94d1c775986b37fc31304235b71414321ef66 |
| Sha512 | 804f2f932c5d3372a1932d083c4cd73ae9ce52cac979b71b697035d46dabce57021db8dca5a0bbf25ee8bf5c4cf99d401482b4e320b99fe30ac3031686c607d8 |
| SSDeep | 96:eGb3Ru8yjl4xjHjZnlUjsuCwy8YKQnsBXFu1GNncvAUyjFbAY5t2D:eEFyyHjZnRuCJKtNZjJ/SD |
| TLSH | 92735C8B3B71D2142C222ADE28FD64E687AEA5B5077FF1CE1D63452E8D93CCD4940792 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001
Shape
scr:ps1>scr:vbs>scr:ps1
malicious
3 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
" & vahuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
& var_huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential