Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
File Size
5.19 MB · 5,185,520 B
First seen
2026-08-23 16:00 · 2 months ago
Last seen
2026-08-23 16:00 · 2 months ago
Last analysis
2026-08-23 16:00 · 2 months ago
Hashes MD5
5d1d3b4bd5113a2ec1e089b212969532
Sha1
2628f6aec1d8afd2951ec731657679894d526541
Sha256
451f8c64c6b08f17306389d3212c5314e05fb493e8b153982d74e34cad8b0f8d
Sha384
24e435c5014715d07c6d3278a1a3abf7852a3c2b56033703dc43a81a677c8237df927466cd27afcd62ea722ad159beed
Sha512
5bc57a650153ad99c3f8ad718c5c4c46da36da19e18f60f1b9240c4547bb890d57e60f0f6504ce02772b3ae43bdaa9b1f5d79d35f671f624eb249d863157e282
SSDeep
98304:5cNttWfxtqZ4Pp7BuL0FuZYn/mk0E4RzUa9yBCKGSZb917cCFb/M:5SgHq+PpV6Au2K7qCKGSZb9NccY
TLSH
F03633598C29D1B4C155343B2D7EED50520153EAACBE8BBCA393039AB56EF703377682
126 malicious · 183 files
Malicious chain only
Expand all
ZIP 5d1d3b4bd5113a2ec1e089b212969532 ZIP Archive T1027 · T1059.001 BIN zapret-discord-youtube-1.10.1 BAT general (ALT).bat extracted from ZIP Archive BAT general (ALT10).bat extracted from ZIP Archive BAT general (ALT11).bat extracted from ZIP Archive BAT general (ALT12).bat extracted from ZIP Archive BAT general (ALT2).bat extracted from ZIP Archive BAT general (ALT3).bat extracted from ZIP Archive BAT general (ALT4).bat extracted from ZIP Archive BAT general (ALT5).bat extracted from ZIP Archive BAT general (ALT6).bat extracted from ZIP Archive BAT general (ALT7).bat extracted from ZIP Archive BAT general (ALT8).bat extracted from ZIP Archive BAT general (ALT9).bat extracted from ZIP Archive BAT general (EXP).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO ALT).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO ALT2).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO ALT3).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO).bat extracted from ZIP Archive BAT general (SIMPLE FAKE ALT).bat extracted from ZIP Archive BAT general (SIMPLE FAKE ALT2).bat extracted from ZIP Archive BAT general (SIMPLE FAKE).bat extracted from ZIP Archive BAT general.bat extracted from ZIP Archive PS1 service.bat extracted from ZIP Archive · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and
MITRE techniques from the initial file to each final payload.
Structural branches: 8
STICH kept: 3 secondary ignored: 5
bin
5
Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…)
are summarized here instead of producing STICH Paths.
STICH Path & Shape 3 STICH Path = the fingerprint (canonical chain with techniques)STICH Shape = structure onlyOnly determinant branches produce STICH Paths.
3 / 3
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
2 nodes
Path
arc:zip>scr:ps1~T1059.001
Shape
arc:zip>scr:ps1
technique 2 nodes
Deobfuscated PowerShell
UNKNWOWN malicious
write- huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWN malicious
"Write huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWN malicious
"Write huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
126 malicious · 183 files
Malicious chain only
Expand all
ZIP 5d1d3b4bd5113a2ec1e089b212969532 ZIP Archive T1027 · T1059.001 BIN zapret-discord-youtube-1.10.1 BAT general (ALT).bat extracted from ZIP Archive BAT general (ALT10).bat extracted from ZIP Archive BAT general (ALT11).bat extracted from ZIP Archive BAT general (ALT12).bat extracted from ZIP Archive BAT general (ALT2).bat extracted from ZIP Archive BAT general (ALT3).bat extracted from ZIP Archive BAT general (ALT4).bat extracted from ZIP Archive BAT general (ALT5).bat extracted from ZIP Archive BAT general (ALT6).bat extracted from ZIP Archive BAT general (ALT7).bat extracted from ZIP Archive BAT general (ALT8).bat extracted from ZIP Archive BAT general (ALT9).bat extracted from ZIP Archive BAT general (EXP).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO ALT).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO ALT2).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO ALT3).bat extracted from ZIP Archive BAT general (FAKE TLS AUTO).bat extracted from ZIP Archive BAT general (SIMPLE FAKE ALT).bat extracted from ZIP Archive BAT general (SIMPLE FAKE ALT2).bat extracted from ZIP Archive BAT general (SIMPLE FAKE).bat extracted from ZIP Archive BAT general.bat extracted from ZIP Archive PS1 service.bat extracted from ZIP Archive · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1027 · T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [Deobfuscated PS] deobfuscated · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001 PS1 [PowerShell Command] code extracted · PowerShell T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWN malicious
write- huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWN malicious
"Write huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWN malicious
"Write huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Coming soon: export of this report's indicators to MISP and EDR platforms.
