8f1f7b5845ab1df607ae00cc00160c72

PowerShell

MD5: 8f1f7b5845ab1df607ae00cc00160c72

Size: 12.14 KB

application/x-powershell

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	8f1f7b5845ab1df607ae00cc00160c72
Sha1	f6cfb0244f1a2b6d65bc0d5b8cf1f3a4e212bfd0
Sha256	adefbec6608c664c793d37e0a41a36ab19af1a5ba9e81e89e76252b49cfeb361
Sha384	ffc6059076bb82483bbed03f0972ad2e0dd400c9b280a965aa6ec5ea91bce9769ca628bae4053a0b4167f20d6adf9490
Sha512	f3eeeb07c4048593596a203c93f34e915f2ab3e984c4e99eacc81932f84b490cbd3c30dcbf70593e8959986eb1982111e210829469e7648996216046b0a33565
SSDeep	192:JgxCA3/vdI1oMgyyClfrKd5BbXUal/HpFTQh/1/iydxxuiQVXXdJBxXj8t0WVrV6:m8iv6HlDKVHfFdxXj8t9yd
TLSH	A842C629378F996806C3106DF9EFE5959915663749A82810F2DE83D0FFCB034D23BB99

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001~T1105

Shape scr:ps1

malicious 1 nodes

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

8f1f7b5845ab1df607ae00cc00160c72

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.