Malicious
aab85d7018c9401dca0b45a0cc8e30e1
PowerShell
MD5: aab85d7018c9401dca0b45a0cc8e30e1
Size: 1.17 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.17 KB · 1,170 B
First seen
2026-08-12 22:02 · 2 months ago
Last seen
2026-08-12 22:02 · 2 months ago
Last analysis
2026-08-12 22:02 · 2 months ago
Hashes
MD5
aab85d7018c9401dca0b45a0cc8e30e1
Sha1
bd17b9e101a0a7b813cd068f08b0a1a422de36b7
Sha256
1b151dd1b1ca636550029602ee88eae182a4143fef630a608647f4b027051a9a
Sha384
81a21c858a4e7d399d12cbe10fe41fb137aff0c9f6efdce1fdd28c0a3edefcb381d24d9243932fc1048b95cf0bd1f6db
Sha512
c560d028dae12fda19041ab034acd17ed4445471dae41a52d872469f7a09463db2130b58e968d829adbdf020aa64445bea5dbb2099d682e052bfea6c145555b5
SSDeep
24:PSmb7FFj1K2cYEHp2Owxs4H3WdyuSp2p8xs4H3vV3E0suep2nSC+Gh6/xCMpXR0X:P7r1KHHlmIPSG6SwvkNpheX
TLSH
D921D72333088E6803168191717C38E3DEB4C2FAB8B00814A5D179C825BEFE2305C78B
8 malicious · 8 files
PS1aab85d7018c9401dca0b45a0cc8e30e1T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Base64-Block]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
systemhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
systemhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
systemhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential8 malicious · 8 files
PS1aab85d7018c9401dca0b45a0cc8e30e1T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Base64-Block]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
systemhuhuhuhuhuhuhuhuhuhuhu
aab85d7018c9401dca0b45a0cc8e30e1 › [Base64-Block]
Deobfuscated PowerShell
UNKNWOWNmalicious
systemhuhuhuhuhuhuhuhuhuhuhu
aab85d7018c9401dca0b45a0cc8e30e1 › [Base64-Block] › [Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
systemhuhuhuhuhuhuhuhuhuhuhu
aab85d7018c9401dca0b45a0cc8e30e1 › [Base64-Block] › [Deobfuscated PS] › [Deobfuscated PS]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account