Malicious
Malicious

8974bca90f87bdd82c1186a99c5d7e79

PowerShell
MD5: 8974bca90f87bdd82c1186a99c5d7e79
Size: 1.51 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8974bca90f87bdd82c1186a99c5d7e79
Sha1 5a5db57fb8c5de443faf45f15ffe97aa467ae4df
Sha256 f2369139fc9eed7dab6a32fb150896f21c6da9f60aaa2f8aa86f33139ec7bd27
Sha384 ee52e6bdd599d7d4abad6167f9b1fd9e20b81628cc5f84e0d5f36f890745a69a36107db3e43ff4437316788824474990
Sha512 47d64b599ab5b5d508e6775dbeb76d7bb66309d1fc8c860e87ef4275d2ab178b9cc5045440cb4c0e4b5ddd70f4690683f9af2d291e160f077727bda5e40edd04
SSDeep 12288:1T88md1xl9WMGJDIRHYNWNEsnjUeW6IzuL6S5tRkS21cWQa1JDySoLyN:Qd1S81VNE8nxz5/kS21cWd1RySoLW
TLSH 6765390B0B3C27379FAA13714469C10913E84EC9E8B69F1C666DD4B4AEB4E0F16A55FC
8974bca90f87bdd82c1186a99c5d7e79
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
8974bca90f87bdd82c1186a99c5d7e79
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙