Malicious
PowerShell
MD5: 9f606686c3d975321a05a6436f0f5674
Size: 21.5 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
21.5 KB · 21,502 B
First seen
2026-07-17 19:30 · 3 months ago
Last seen
2026-07-17 19:30 · 3 months ago
Last analysis
2026-07-18 07:41 · 3 months ago
Hashes
MD5
9f606686c3d975321a05a6436f0f5674
Sha1
479394ed6ac3cb353eb0baebecac5893e144efef
Sha256
f25f1411b52a0b9c903a79b77d10991717028da89b21decbc3f1c1cbea482f31
Sha384
c9c1d60bc8caa95761df014cbb5648c9cc14cff1b3126b0705ca595fe224e815974e7229ed17ed73fdfa706617aa3635
Sha512
6f4052de922881513495512577e15a528371308b1199b93e6a07267626d2380d9d4883ff94c170293b9d59e8fe8542d50f9070de732b81cf6bdafa7c7ac410c9
SSDeep
384:Q9lojCEnmRGour9zvvW9wVgMeW4ewQ3tY7bv4BWyUmYqJFPmy7Af7dFjOimb:XjiB9PMeDrQAYvL7AxZ6b
TLSH
41A2F13BC931FC94875E360063641C9922995526D3F34E6CCB1A3CFA7D367A5FB24A88
6 malicious · 6 files
PS19f606686c3d975321a05a6436f0f5674T1027 · T1059.001
PS1[Base64-Block]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Base64-Block]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential