Deep Malware Analysis of 4d527f1c7ee501c7381e82bdb0936056 | md5: 4d527f1c7ee501c7381e82bdb0936056 | PowerShell | T1059.001 | T1105

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	4d527f1c7ee501c7381e82bdb0936056
Sha1	f6c2c3b3cadf2c5b110d9fc021284f8f16c12582
Sha256	2e3dacd403b29ba9551f339e19ace5b466fa7db57f43272593c9e9d3f8e882da
Sha384	aa72e258946aeef48b73b32548aab5d546cc131cf6831f94f5df1b3262f3e3842d0b0b48a5e7e5fde35adc22662a409b
Sha512	4b4d85a9be83915c355c06dbee6453d981d011c184ceda13c063930ff8f1373927a37f5636573cebe4304402ff2447cdf66835450cef5f4372ed8782a79bc0dd
SSDeep	12288:ByyDi0qNAhzaUSnDsvIIvHCbXQ4NDg32B3G1tBwP3fPOcJmWTFH/up1zsyxXX62G:U
TLSH	F06511523951FD7D029693B16E1646F0A46ACA40CEDF8557F24DCE88B14EC863AFA3C3

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1059.001~T1105

Shape scr:ps1

malicious 1 nodes

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu
URL in PowerShell #2	https:huhuhuhuhuhuhuhuhuhuhu
URL in PowerShell #3	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

URL in PowerShell #2 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

URL in PowerShell #3 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential