Malicious
PowerShell
MD5: b4af56461f10de39534dafe51d5c9351
Size: 140.38 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
140.38 KB · 140,376 B
First seen
2026-08-31 06:30 · one month ago
Last seen
2026-08-31 06:30 · one month ago
Last analysis
2026-09-02 11:48 · one month ago
Hashes
MD5
b4af56461f10de39534dafe51d5c9351
Sha1
d3511128f47e7cc8da222ae1d423c5e60803fb47
Sha256
ab1ddcbfd3c78ca27188a58ee0ac445caadeea5d0a9f783dc126b74a0c21c804
Sha384
ae4ca29f01cf78ac5a8a6bcb469914fb4515449f8186549499227356888f509cafedf83e61e77e3f5f8c7a29e7c30e15
Sha512
1ab71c8933afc162214eeb7eb84f3664c035d0584d111bb8e36add094dae7e1b80ebe4b1f89f7620c70cec0b956b43132f7a53db76ec7616aa5efd2a0d35b1c2
SSDeep
3072:jqPqWHlv+tMOzOtZ0Yq4tVBP/YeVxH/+P:jqPTl41qBIeHWP
TLSH
84D30250F9DEA93E115ACD04F4CFE676AFB00F20D458A906D22B26A72C742CDB99361D
5 malicious · 6 files
PS1b4af56461f10de39534dafe51d5c9351T1027 · T1059 · T1059.001
BINb4af56461f10de39534dafe51d5c9351.comtrace
SH[Command #1]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:bat
Shape
scr:ps1>scr:bat
malicious
2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential