Malicious
PowerShell
MD5: 50ab1c548eed2f7bd6e293dd5d0a3290
Size: 6.11 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
6.11 KB · 6,112 B
First seen
2026-10-21 12:16 · 4 days ago
Last seen
2026-10-21 12:16 · 4 days ago
Last analysis
2026-10-21 12:16 · 4 days ago
Hashes
MD5
50ab1c548eed2f7bd6e293dd5d0a3290
Sha1
95d36b72aa8d91fe150aae1e1ae6b55b6a59b93e
Sha256
e082e017d89e7419ad1a9d8f19cb42a5fe00e8e22be561b8b7b0e0b8ab046ac4
Sha384
ae4bc7df83feac5ebe5fbaa26b22ac56c6c11b76d55e5d3e905eb1e06ba753e3877e8714ce38375d84d2671cccc0df28
Sha512
18c4fe4ef78536d688866fcb2e8f6427499e99705c8420de021c7c46e7a424091ccd4ea4a4e711d9d9a4edc752290ce2680cce1d655f8bcc4ad27cab1a75399d
SSDeep
96:3vne/AL4yXEu2wqu702++5W+ZAw+8O3/twkCCjR/4zhQQDRtJtb7PMvZx:3vne/ALuwqu7Q+FAndtVgzKQDXJtvPMz
TLSH
92C17C3DCD75FDC0436EB19085653F5B20E81613E7B65BACE99118B62825382DF3A29C
Detection
Symbol obfuscation
Medium
2 malicious · 4 files
PS150ab1c548eed2f7bd6e293dd5d0a3290T1027 · T1059 · T1059.005
VBS50ab1c548eed2f7bd6e293dd5d0a3290.deobfuscated.vbsT1059.005
SH[Command #0]
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.005>scr:vbs~T1059.005
Shape
scr:ps1>scr:vbs
malicious
2 nodes
Path
scr:ps1~T1027~T1059~T1059.005>scr:bat
Shape
scr:ps1>scr:bat
technique2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential