Deep Malware Analysis of 5ed4539dd877aa5da24196bf0658eef3 | md5: 5ed4539dd877aa5da24196bf0658eef3 | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5ed4539dd877aa5da24196bf0658eef3
Sha1	9e1908a6f9ce6f2fe184b4cdb9029831c602747e
Sha256	9c4faf515bac54a73110d0b387a471a9bf4ba77f8aa18e667fa5560e2252cc7c
Sha384	48cdc0888222c79afe204d9a081be3d0e8f32ab4d13f4643df9f76cda2d62ed1a0699161df7f8cd472e41a9749427551
Sha512	03557fcad399596318748471e515207d68030cee10674ccdff287aab8fb7409d3765983ef4a9e056383f4e47836dad9bf1e33e129d7f12276b1e8c22d583a901
SSDeep	3:VSJJFIGFGMFI1oM3KAJJFId1sqPJH0cVERvBuIFSWEan:s8GFGMFI1R3Ks8zsO0cKQ+n

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

Start-huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

-args huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential