Malicious
6057b61b223e13bc9ca5699004d4791f
PowerShell
MD5: 6057b61b223e13bc9ca5699004d4791f
Size: 5.61 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 6057b61b223e13bc9ca5699004d4791f |
| Sha1 | d14be096b4a8a75d33226d2ab32c4e120f011e02 |
| Sha256 | 8b77f32b10a1ddf661d45e708b49dbedfde019ba6d71ddba2c3430e016a322a4 |
| Sha384 | 62514a5f137b57b29bcaa3edc2b64007435a162f4f41559efe0c8e93369184582ae8db836e532f3e883c2ab452b2a8ae |
| Sha512 | 41dc1b12a1e347b1a6d3209388d30ad3c51c5e198cd751b2128b53c34711dd25aa90e5cf3f375e4d5b70fa2bcc3420e3b7ad0f3295d338639fb3891f23a2e8f0 |
| SSDeep | 96:uV1ydDwy6xN5ZUHt8PXFnXCJUs755qOQwajzL/fGvRgfo+SEzP0WHS0cLMPeaxPi:uV1ytwx5ZUHt8d6755DQhC5GSrCfsb |
| TLSH | D6C1660003BE289747A3DC16F4CBA621BBCEAE5E402D1470A69C59CBFBD5A55C310EF5 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001~T1105
Shape
scr:ps1
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | http:huhuhuhuhuhuhu |
| URL in PowerShell #2 | http:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
http:huhuhuhuhuhuhu
URL in PowerShell #2
URImalicious
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | http:huhuhuhuhuhuhu |
| URL in PowerShell #2 | http:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
http:huhuhuhuhuhuhu
6057b61b223e13bc9ca5699004d4791f › [PowerShell Command]
URL in PowerShell #2
URImalicious
http:/huhuhuhuhuhuhuhuhuhuhu
6057b61b223e13bc9ca5699004d4791f › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.