Malicious
9428d170875f6b96e77f43510649b116
PowerShell
MD5: 9428d170875f6b96e77f43510649b116
Size: 645 B
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
645 B · 645 B
First seen
2026-08-16 07:01 · 2 months ago
Last seen
2026-08-16 07:01 · 2 months ago
Last analysis
2026-08-16 11:12 · 2 months ago
Hashes
MD5
9428d170875f6b96e77f43510649b116
Sha1
4f87706ea1e555eb9dde5de78d803c619eea8f4f
Sha256
7a9f8afbe39560ea52daada8700749371f189345aa7ec213dbdb537387c01d79
Sha384
f215c611cc7b90e96ddc7cc82d9152f46aacfc4d8cb923e0744b1ba8a81f06c8b2c533e7f4cf981ffc7638ca5a3a79e2
Sha512
63a4cc91d19f2757ef53177e87cbac164e77c5a3164f4d4ee40a0c750ae5f43e27a8a3e79cb9ae1e630d1755fd766d3c2bfb3f89e90837de400172e73c9a3174
SSDeep
12:eR9Q3X0oOZzjrA7rE5c9D9OzbkVnsEL3cFhsMeVM1TPUXSbCMhe:Y9Q0fjr8rEK9hpceVxX+Bhe
TLSH
EFF062631394C89881E46820A339B4E2C47B789A300D8D40F6E5DE09D634F59B28C1DE
2 malicious · 2 files
PS19428d170875f6b96e77f43510649b116T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
$w = Nhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
PS19428d170875f6b96e77f43510649b116T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
$w = Nhuhuhuhuhuhuhuhuhuhuhu
9428d170875f6b96e77f43510649b116
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account