Malicious
PowerShell
MD5: a5c2c26a565d5a0c6e4d9a9258069c3b
Size: 74.09 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | a5c2c26a565d5a0c6e4d9a9258069c3b |
| Sha1 | 3b0965cbbd8677a7f3831a80f6721bae76ea1b7b |
| Sha256 | 99149794ab1aba9c851c83644e2abab10335b93b59d9b64901325eaefaad16c6 |
| Sha384 | f49cb42ae83ecc7acb8b82ab207ba056e7678217a2474ba3e6b7dd12faa28c7e62cd4321051cafa082fb9cd29e622118 |
| Sha512 | f89185c987c1e573e987a9a4b484d57d3729c8b8f93b1bb559bc6e7ee4000433c33df42e84f04d7f6b384fc6b2b8d4c9f4f86276cfa8b76cd6ee63e0bab1fea5 |
| SSDeep | 192:6Kd+gDaDsaCaasagsals+g9axAadKd+g5aMCa6s+g9aMua1aasamFavKd+gZagFa:xfAYc2O4VaR7nKM8 |
| TLSH | 897353374445CF649718C815163E5EC89902FA2693E2E31D70CCF732A9AD4EEEF1AD98 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1059.007~T1105
Shape
scr:ps1
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential