Malicious
PowerShell
MD5: 8f1f7b5845ab1df607ae00cc00160c72
Size: 12.14 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 8f1f7b5845ab1df607ae00cc00160c72 |
| Sha1 | f6cfb0244f1a2b6d65bc0d5b8cf1f3a4e212bfd0 |
| Sha256 | adefbec6608c664c793d37e0a41a36ab19af1a5ba9e81e89e76252b49cfeb361 |
| Sha384 | ffc6059076bb82483bbed03f0972ad2e0dd400c9b280a965aa6ec5ea91bce9769ca628bae4053a0b4167f20d6adf9490 |
| Sha512 | f3eeeb07c4048593596a203c93f34e915f2ab3e984c4e99eacc81932f84b490cbd3c30dcbf70593e8959986eb1982111e210829469e7648996216046b0a33565 |
| SSDeep | 192:JgxCA3/vdI1oMgyyClfrKd5BbXUal/HpFTQh/1/iydxxuiQVXXdJBxXj8t0WVrV6:m8iv6HlDKVHfFdxXj8t9yd |
| TLSH | A842C629378F996806C3106DF9EFE5959915663749A82810F2DE83D0FFCB034D23BB99 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1105
Shape
scr:ps1
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential