Malicious
Malicious

98ba4cfedb0352e16a0130c5255a1166

PowerShell
MD5: 98ba4cfedb0352e16a0130c5255a1166
Size: 96.17 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 98ba4cfedb0352e16a0130c5255a1166
Sha1 6609aaa1704e4e1320f7bd3eb79eb0d10555a0c3
Sha256 42b829ea5586978abccb9e7d9e3de2b4bf17fd2ab811c31a0c27c90a4a88b9dc
Sha384 f402a0034423add85fb49faf67513c0cc5a1cf160422c29bbfdd25e702f28b552a6f70e3e57744fc255834c15ec138c9
Sha512 b932f0bb0364b63a080d5e6942bad99de4546de4556968d976d9cecfec7cffbb40135b546d1c6b8b9bdb35a349e02a4132fe127ed6aafad46036f14dd230d95d
SSDeep 1536:be1FJGsdpjk0oNuPtgtQCTpnF9Q90adz4zcpNpfO+GL1jfrwNdB9/qSw7ieYi:bkF8spjPyuP+JpF9Q9Pz4zWOL1jfUnju
TLSH 0D9323053B8C95E010CDDDBE0FC06CA956AEE072D3DADC9C66CF5A84AB43AFA459C474
[Deobfuscated String]
Malicious
[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
ise | huhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
(?i) huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
[Deobfuscated String]
Malicious
[Base64-Block]
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
ise | huhuhuhuhuhuhu
98ba4cfedb0352e16a0130c5255a1166 › [Deobfuscated String]
Deobfuscated PowerShell UNKNWOWNmalicious
(?i) huhuhuhuhuhuhuhuhuhuhu
98ba4cfedb0352e16a0130c5255a1166 › [Deobfuscated String]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙