Deep Malware Analysis of 79ce160330d90503f73848d8e52fc459 | md5: 79ce160330d90503f73848d8e52fc459 | Javascript | T1059.007 | PowerShell | Powershell: Hidden Execution | T1059.001 | T1027 | DeObfuscated | T1105

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	79ce160330d90503f73848d8e52fc459
Sha1	78fd3d85fcc9d0149713e6d510348c42bca67bb1
Sha256	88abb9c865aa4acfc84dd481e97fe0b44a86a8d57643b7bb02e73dd4763df24a
Sha384	48325806934ba0f59c41444ca27f8a7747d0492f306c18ed489be6578b84dcc44b2c369a98e9d99060d68dfdaf5c5b53
Sha512	58c28f5c2b1339eee9cd621327c4e76428a3d521e4808b26357f3ebc2b90c1d2d6237519713c27702975d3eab81c10692c63188e96bbdd1d5c8c225e3ec751b6
SSDeep	3072:5ciNsNis0ssiseisLiiDsP+sjci3sC0sMiiDsC4s7ssiswrshciXsers9SiDsC04:3
TLSH	2CB38B9928A84F90124A5146391C6FCFB54A770E77BBAF48534B7E09231C4B62E6FE70

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001~T1059.007~T1105

Shape scr:ps1

malicious 1 nodes

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential