Malicious
Malicious

9355dc7cfb3726f26d7ffa21f20a54f6

PowerShell
MD5: 9355dc7cfb3726f26d7ffa21f20a54f6
Size: 14.81 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 9355dc7cfb3726f26d7ffa21f20a54f6
Sha1 7e5ce139a8f64a03ff48c8a614ced155c936e39d
Sha256 3ccf794dd168536bb856808f694b545568f37d3d338b9c084eecbb003dc6bcc4
Sha384 100dbc57accd9411de4e8d0b40a72b942fe93bee540a487a8f5d2790a7347541cc61c8147850ba9b87dda8333f876f93
Sha512 8288f563a9ea0ef61f71fb12dcda251eeef1e0e538399300228c15fc6506eca971709bfee90f56c78327cfd1879f3f0df6901ccba42d052d87103beab8f8d5c6
SSDeep 48:3geDoYD8bBh0N0o+TkGtlOuuuuu0GH2BXXDdLPG:QCoYAhkGLEBjdL+
TLSH E0624F3C2740FD56678762A6051A3A9588002A3FB2959A1F7CDC0C13F36E63DDD2698F
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059~T1059.005>scr:bat
Shape scr:ps1>scr:bat
malicious 2 nodes
Path scr:ps1~T1027~T1059~T1059.005>scr:vbs~T1059.005
Shape scr:ps1>scr:vbs
malicious 2 nodes
Command (COM trace) #1 UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
Command (COM trace) #1 UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
9355dc7cfb3726f26d7ffa21f20a54f6
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
9355dc7cfb3726f26d7ffa21f20a54f6
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙