Malicious
Malicious

58f059277965f439bed40e9a038ad2d1

PowerShell
MD5: 58f059277965f439bed40e9a038ad2d1
Size: 8.17 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 58f059277965f439bed40e9a038ad2d1
Sha1 667eb155a9153af159fee435b986febc45a53d80
Sha256 3309450498daff8df885b200d3e5fbf7e6346979085d2fd0a69410925917c10d
Sha384 c6b41f1005cf6c54aa358db223402492a8623fda94bbac9d33b873c04f88c654605bdfb194d5da3151c0d042ebfbbd25
Sha512 d14b4a8a668e497071ad529d5b3b0cbdb928303c0435d244403c01c88d0fe1906793d7ced42715e4a982d7f0d43151671235517f46b2496d2f7f8e976442931f
SSDeep 192:PvLvZuRs0PGI2/MCju6tCAABQGb5CtiHhwG7jVsS2KoYoWL:nLxuG0PB2/Mp6MAAB3sWhwGuS2PY9
TLSH 44F1773DCAB5FDC4436F72D05AAA3B46209C1B23FBB54B6CFAC208691814649DF3A54C
58f059277965f439bed40e9a038ad2d1
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
c2a409huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
c2a409huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
c2a409huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
58f059277965f439bed40e9a038ad2d1
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
c2a409huhuhuhuhuhuhuhuhuhuhu
58f059277965f439bed40e9a038ad2d1 › [Base64-Block]
Deobfuscated PowerShell UNKNWOWNmalicious
c2a409huhuhuhuhuhuhuhuhuhuhu
58f059277965f439bed40e9a038ad2d1 › [Base64-Block] › [Deobfuscated PS]
Deobfuscated PowerShell UNKNWOWNmalicious
c2a409huhuhuhuhuhuhuhuhuhuhu
58f059277965f439bed40e9a038ad2d1 › [Base64-Block] › [Deobfuscated PS] › [Deobfuscated PS]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙