Malicious
Malicious

96430823ee4f810688f6a203df02248b

PowerShell
MD5: 96430823ee4f810688f6a203df02248b
Size: 243.99 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 96430823ee4f810688f6a203df02248b
Sha1 8700197ca7df9f263abae33da5f66558d0737bf6
Sha256 c36e894a024c7d0c8aa9e7cc61d9d5126ea89b3a39ac12d0f540eee5d12f0248
Sha384 fe575812fbfcc3b8afd3ce2bc6e13864d60ec1f03d2e6061b84ce7ad9c0b56e3db45391f6a7465d2aa539d32ee3ce87d
Sha512 91b1c8a10508b87903d058e20022062dd211b4a3189cf880cc4c3945512324c2601d05c7b26de7620163d238fce1a34cdcef57b39e3f446a43eaef1147196091
SSDeep 6144:qlwcBCvClzDYiA38i0Q380E8KS3VFZHQcmjywDlH+A7wlhsD:CCwC8
TLSH 7534822439C0A676164DCCB76C411C1DA9C9F577E3876C4D39CE49C5AF87AB88AEC838
96430823ee4f810688f6a203df02248b
Malicious
[Deobfuscated String]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
(?i) huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ise | huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
96430823ee4f810688f6a203df02248b
Malicious
[Deobfuscated String]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
(?i) huhuhuhuhuhuhuhuhuhuhu
96430823ee4f810688f6a203df02248b › [Deobfuscated String]
Deobfuscated PowerShell UNKNWOWNmalicious
ise | huhuhuhuhuhuhuhuhuhuhu
96430823ee4f810688f6a203df02248b › [Deobfuscated String]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙