Deep Malware Analysis of 6e7b65398cabd56d8ce0ce6bdcd8dbbc | md5: 6e7b65398cabd56d8ce0ce6bdcd8dbbc | Javascript | T1059.007 | PowerShell | Powershell: Hidden Execution | T1059.001 | T1027 | DeObfuscated | T1105

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	6e7b65398cabd56d8ce0ce6bdcd8dbbc
Sha1	3b0cc0512be94fb4aeea5deb63e4994922daf141
Sha256	9be6d6539d818ecb4dea96d4e46f10f7d16767a621016482fedeabe497bb74cc
Sha384	2e2f529bbe8b9f80d02ee7861a1b55d3cd28a87d42f370f835acbe4ab5ee95067a5524a319d98454c785e5e48040f27f
Sha512	d1ab67a0fc541877154b4071d9d061adf98c09ecffe83a573e1569d950113fd66bc9becf0bceca3fa493324ccdbfb785f95a1a6af49db3c4381ac1d52c3c9eac
SSDeep	3072:GkANUN+U8UU+Uq+UP+AnUjKUHkArUe8U0+AnUewUfUU+UovUxkALUqvUdOAnUe8c:S
TLSH	59A329561544CFA40B1183B84B40BED6D636F60BFFC6A37A66893F0964BC887396BD70

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001~T1059.007~T1105

Shape scr:ps1

malicious 1 nodes

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential