Malicious
Malicious

5ed4539dd877aa5da24196bf0658eef3

PowerShell
MD5: 5ed4539dd877aa5da24196bf0658eef3
Size: 116 B
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5ed4539dd877aa5da24196bf0658eef3
Sha1 9e1908a6f9ce6f2fe184b4cdb9029831c602747e
Sha256 9c4faf515bac54a73110d0b387a471a9bf4ba77f8aa18e667fa5560e2252cc7c
Sha384 48cdc0888222c79afe204d9a081be3d0e8f32ab4d13f4643df9f76cda2d62ed1a0699161df7f8cd472e41a9749427551
Sha512 03557fcad399596318748471e515207d68030cee10674ccdff287aab8fb7409d3765983ef4a9e056383f4e47836dad9bf1e33e129d7f12276b1e8c22d583a901
SSDeep 3:VSJJFIGFGMFI1oM3KAJJFId1sqPJH0cVERvBuIFSWEan:s8GFGMFI1R3Ks8zsO0cKQ+n
5ed4539dd877aa5da24196bf0658eef3
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
-args huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
5ed4539dd877aa5da24196bf0658eef3
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
5ed4539dd877aa5da24196bf0658eef3 › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
-args huhuhuhuhuhuhuhuhuhuhu
5ed4539dd877aa5da24196bf0658eef3 › [PowerShell Command] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙