Malicious
Malicious

9f606686c3d975321a05a6436f0f5674

PowerShell
MD5: 9f606686c3d975321a05a6436f0f5674
Size: 21.5 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 9f606686c3d975321a05a6436f0f5674
Sha1 479394ed6ac3cb353eb0baebecac5893e144efef
Sha256 f25f1411b52a0b9c903a79b77d10991717028da89b21decbc3f1c1cbea482f31
Sha384 c9c1d60bc8caa95761df014cbb5648c9cc14cff1b3126b0705ca595fe224e815974e7229ed17ed73fdfa706617aa3635
Sha512 6f4052de922881513495512577e15a528371308b1199b93e6a07267626d2380d9d4883ff94c170293b9d59e8fe8542d50f9070de732b81cf6bdafa7c7ac410c9
SSDeep 384:Q9lojCEnmRGour9zvvW9wVgMeW4ewQ3tY7bv4BWyUmYqJFPmy7Af7dFjOimb:XjiB9PMeDrQAYvL7AxZ6b
TLSH 41A2F13BC931FC94875E360063641C9922995526D3F34E6CCB1A3CFA7D367A5FB24A88
9f606686c3d975321a05a6436f0f5674
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
9f606686c3d975321a05a6436f0f5674
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
9f606686c3d975321a05a6436f0f5674 › [Base64-Block] › [Base64-Block] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙