Malicious
PowerShell
MD5: a37d23f6068ad4e18bca0fe7d73dd8d6
Size: 1.57 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.57 MB · 1,566,295 B
First seen
2026-08-17 17:01 · 2 months ago
Last seen
2026-08-17 17:01 · 2 months ago
Last analysis
2026-08-17 17:01 · 2 months ago
Hashes
MD5
a37d23f6068ad4e18bca0fe7d73dd8d6
Sha1
7ced26444a9ffef479a9d2f3bae031aaf9303801
Sha256
63293659e7617226c9d4420f00ca7ab408507898ec0c98f5a88e99f19c7b7491
Sha384
154c0ef5cd58797f2cd279eef4c7b7173582c6226791113e224e3cd12a8b2aea3506fca51e11d0e5fd70d48c6188c5a4
Sha512
5cb457dca9856917833cb16b454b3c6ac92633d3fcd24794059f71acd8e30f1cf90bd09a2c08a9ec028343141dc231d689964130d92d2182f7d4c46fcc6b0289
SSDeep
12288:1e45StWu/WvSzkysv1aWuJK3QcoLem0SPn4mciGE+:1e3IwWvSzkyw1aWRmfM/
TLSH
D67539470B3C2777AFA403A11459C10A23FC4EC5D8B69F49662DC4A86EB8E1F26B55FC
11 malicious · 11 files
PS1a37d23f6068ad4e18bca0fe7d73dd8d6T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes