Malicious
59ca4bd1b84d8e74637f9d589e85e435
PowerShell
MD5: 59ca4bd1b84d8e74637f9d589e85e435
Size: 7.97 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 59ca4bd1b84d8e74637f9d589e85e435 |
| Sha1 | e17076a3ef4bcd27c3dcd86133d9d3deaaa4d697 |
| Sha256 | 687248c21164a212ef2860d3f496e4e00f6147e26fed9bfba014ebf6f9b6798e |
| Sha384 | 0857ec21c2413f706997a387fa3d70dc11fc0aec328cb037ccb9099682246e319909a8c1f759eb68c6032bb21a6ececc |
| Sha512 | 7732fcd517cfe23f03367323e7180e871d07e8eac9c1a45a1dae86b0e62a5888ac0378314ff7ae4ae55e1560e1e6e977c610f3c62d32b3634fcdd5bc50f0745e |
| SSDeep | 192:NsgIyrPOeo/WslT1bZFl/HyNSRmfiqFaUXsbwwb4:SgIgOBTdZGs8G4 |
| TLSH | BCF1E189AE569029DEF6F33DCF298609E72704170906E259B4DC82A45FB109D83ECDFD |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001~T1105
Shape
scr:ps1
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
59ca4bd1b84d8e74637f9d589e85e435 › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.