Malicious
63b8f6956f83263c19f55433523e52ca
PowerShell
MD5: 63b8f6956f83263c19f55433523e52ca
Size: 74 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
74 KB · 74,000 B
First seen
2026-10-06 08:01 · 19 days ago
Last seen
2026-10-06 08:01 · 19 days ago
Last analysis
2026-10-06 08:01 · 19 days ago
Hashes
MD5
63b8f6956f83263c19f55433523e52ca
Sha1
d5af687163d462bba4f3fa85f3dc8b7aed22c397
Sha256
71000e3216530f9c6174b08dae181c16642a7dfa6021895c1db4856298d6c3f4
Sha384
50aab4e46ddf59ee4eaa381b6a059722ba2d205d24fdf5f063979da00390c7845aa28adbe38f8870f5ca014889c24945
Sha512
83fa7544ac69c9dadd81885495d07842b6393ce081eb0f6da36d4e222a2412f488afd0236c78a250ec9e85992fd1bfcb4b024e061a3becda4b85a70487f25144
SSDeep
384:gIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIf:t2Z+a
TLSH
11735A03277120062C7396CC7C79A57A062AEF950B7E75BB32F2458F8AD267D4BC0792
7 malicious · 7 files
PS163b8f6956f83263c19f55433523e52caT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
& (lllhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential7 malicious · 7 files
PS163b8f6956f83263c19f55433523e52caT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
& (lllhuhuhuhuhuhuhuhuhuhuhu
63b8f6956f83263c19f55433523e52ca › [Deobfuscated PS] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account