Malicious
Malicious

b1d6afdd5ef4eab98f63f73c32fecdbe

PowerShell
MD5: b1d6afdd5ef4eab98f63f73c32fecdbe
Size: 16.91 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b1d6afdd5ef4eab98f63f73c32fecdbe
Sha1 e002509b85cb4b54c432560aa29de8cdc8094a5d
Sha256 5b2b1fab4e16df768d7cdebd045345771925f42860d4bbcbe4708e16f939ad62
Sha384 3b9f5046d759a0ab9a93292d04d67c10e29fc17459edba140eed2794c6ebed287ee2f8f4fa6be8457cd55dd694ec4698
Sha512 850b39fa4a135430363928d728eb6f131bec394ac26c477ab8ab41392132851d54aeb2ffab0787b564a81b04ea14e44791c1b06dad51aa89294c4ba4b07d5569
SSDeep 3072:fX4CFlBdHQKNgcNT3kMIr9Iqe/OmmV+HBg:fX4CFlBdHQKNgcNT3kMO9IqNmmV+HBg
TLSH 7B074DAB54E78504964A1DC82D4CD166DD89E633ED2E806DCE03BDCF992B6F46C73B08
b1d6afdd5ef4eab98f63f73c32fecdbe
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
b1d6afdd5ef4eab98f63f73c32fecdbe
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙