Malicious
b45477d1c39b4b5b54ffcb00de143cee
PowerShell
MD5: b45477d1c39b4b5b54ffcb00de143cee
Size: 888 B
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
888 B · 888 B
First seen
2026-10-13 06:00 · 12 days ago
Last seen
2026-10-13 06:00 · 12 days ago
Last analysis
2026-10-13 06:00 · 12 days ago
Hashes
MD5
b45477d1c39b4b5b54ffcb00de143cee
Sha1
e5ce303b956aab46db234afcdfbfb837e23531a4
Sha256
4777c49910b352e3c0eedd6ae9e5a74e1c68fe80e09e42fdb0622a1f74835e79
Sha384
cee3a5d3b268f821cfff6a8ae189507b6d9fed75f5877a92d53772cf6dd22d6a7bbb1d946488245f5a8f870dfc7ded7a
Sha512
bd8939eee03ec6b092efae395501c10d75b31892eb3644fc7709c6ecb1d12c4eb200e867aa72786f73e835b9c87e0709b375cab9f5a1d6a016cbe71c51a62a44
SSDeep
24:FQUGjhtHokrmGSHrPhxfjrBlr62XyCYza:FQhhtIk6JHfDr6OpJ
TLSH
3911637109EAB5B0250089C2D77A77888B6100CBF65A389A53CEA190A2244C94B423F4
9 malicious · 9 files
PS1b45477d1c39b4b5b54ffcb00de143ceeT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
PS1file_0.binT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001>arc:gz>scr:ps1~T1027~T1059.001
Shape
scr:ps1>arc:gz>scr:ps1
malicious
3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
$p0 = huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$p0 = huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$p0 = huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$t = "huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$t = "huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$t = "huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential9 malicious · 9 files
PS1b45477d1c39b4b5b54ffcb00de143ceeT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
PS1file_0.binT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
$p0 = huhuhuhuhuhuhuhuhuhuhu
b45477d1c39b4b5b54ffcb00de143cee
Deobfuscated PowerShell
UNKNWOWNmalicious
$p0 = huhuhuhuhuhuhuhuhuhuhu
b45477d1c39b4b5b54ffcb00de143cee › [Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
$p0 = huhuhuhuhuhuhuhuhuhuhu
b45477d1c39b4b5b54ffcb00de143cee › [Deobfuscated PS] › [Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
$t = "huhuhuhuhuhuhuhuhuhuhu
b45477d1c39b4b5b54ffcb00de143cee › [Base64-Block] › file_0.bin
Deobfuscated PowerShell
UNKNWOWNmalicious
$t = "huhuhuhuhuhuhuhuhuhuhu
b45477d1c39b4b5b54ffcb00de143cee › [Base64-Block] › file_0.bin › [Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
$t = "huhuhuhuhuhuhuhuhuhuhu
b45477d1c39b4b5b54ffcb00de143cee › [Base64-Block] › file_0.bin › [Deobfuscated PS] › [Deobfuscated PS]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account