Deep Malware Analysis of 9428d170875f6b96e77f43510649b116 | md5: 9428d170875f6b96e77f43510649b116 | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9428d170875f6b96e77f43510649b116
Sha1	4f87706ea1e555eb9dde5de78d803c619eea8f4f
Sha256	7a9f8afbe39560ea52daada8700749371f189345aa7ec213dbdb537387c01d79
Sha384	f215c611cc7b90e96ddc7cc82d9152f46aacfc4d8cb923e0744b1ba8a81f06c8b2c533e7f4cf981ffc7638ca5a3a79e2
Sha512	63a4cc91d19f2757ef53177e87cbac164e77c5a3164f4d4ee40a0c750ae5f43e27a8a3e79cb9ae1e630d1755fd766d3c2bfb3f89e90837de400172e73c9a3174
SSDeep	12:eR9Q3X0oOZzjrA7rE5c9D9OzbkVnsEL3cFhsMeVM1TPUXSbCMhe:Y9Q0fjr8rEK9hpceVxX+Bhe
TLSH	EFF062631394C89881E46820A339B4E2C47B789A300D8D40F6E5DE09D634F59B28C1DE

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

$w = Nhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential