Malicious
PowerShell
MD5: 4b18d627ede4c7487986a079c93911ff
Size: 3.14 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 4b18d627ede4c7487986a079c93911ff |
| Sha1 | 7e8dfb31177bc63812aa0ae19bd5421c01ebd640 |
| Sha256 | 4c62c64802dca499b6d26134503540478f82f7a179cfb921ffe79504f6beb932 |
| Sha384 | b87703d53b4b77968b57eaa6db3621e417c51928bd40ca584bf8a4e05bd6376cc70f1a35d1ca5023de3ea0fba4d41da1 |
| Sha512 | b3564e426b1a93d55a1ace66f606143ef0e2803fbba1c748134ae8f19032301b14b0f095e5226b0bf414c470ad51deea75efb6405037524ed3a3eac8e94e43a2 |
| SSDeep | 49152:SQCWC7K1/muTf4SN/zDSQHi1+Sa0iwOta:s |
| TLSH | FEE5F1118D555FE5CFB8EA1C40BA6609E7B00E8F4816A549E7A3BC8FEFB3949011F2D4 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1047~T1059~T1059.001~T1059.005>scr:vbs~T1059.005>scr:ps1~T1059.001
Shape
scr:ps1>scr:vbs>scr:ps1
malicious
3 nodes
Path
scr:ps1~T1027~T1047~T1059~T1059.001~T1059.005>scr:bat
Shape
scr:ps1>scr:bat
malicious
2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential