Malicious
PowerShell
MD5: 58371eec5593257a4362ef5a8ff15473
Size: 2.11 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
2.11 MB · 2,112,160 B
First seen
2026-08-24 13:30 · 2 months ago
Last seen
2026-08-24 13:30 · 2 months ago
Last analysis
2026-09-02 11:38 · one month ago
Hashes
MD5
58371eec5593257a4362ef5a8ff15473
Sha1
02168ea78b1096e465c9569ec1ba503777298daa
Sha256
26efd5bad5abe4fb1087b4c7d545c40e0e3c8f4c65703d91a67909587b66b13d
Sha384
d9a301e5556745e998808981f24dfe2a27a8f54819e1fc582f2b0d79fd9ca154af1ab3459b357254d387565bac76a35b
Sha512
2f74d43e1d2c92de3d6937b817b5fc4fa4702e00a896db960ba2d961f1ff6c9e9bb19582941cbef739043091c3f509bdf887fffe209e9c1603d12b20b63c5183
SSDeep
6144:Lgd70BQcU3RWEabsKBDI8V/q7TfksCI4yDaHqnjm:0d7PcUwEabvBHVWTcsCI4jHqnjm
TLSH
E0A5B939AF46467E2F72EE12C9C52036F15473632A9F6CAB40C79E8F4A62644D3C744E
4 malicious · 6 files
PS158371eec5593257a4362ef5a8ff15473T1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1027 · T1105 · T1059.001
JS[Deobfuscated PS]T1105 · T1059.001 · T1059.007
BIN[Base64-Block]
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1105>scr:js~T1027~T1059.001~T1059.007~T1105
Shape
scr:ps1>scr:js
malicious
2 nodes