Malicious
PowerShell
MD5: c28958389efb0b7eb96bd63d36e234a3
Size: 1.01 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | c28958389efb0b7eb96bd63d36e234a3 |
| Sha1 | 167320113def95f3a5acdd196fa9587cd58ce6c5 |
| Sha256 | 0bb593e4bd1913df2e29d7c39c15fe1042cd1e65f401f9778eb76ca14b5f9464 |
| Sha384 | e2bd43a54a36f42fcb1d96b7d01c6a743d2bbc90d5954f39a4bd62672f2c8b31439cca829120b88305b9af15d528d1f4 |
| Sha512 | 9c5cb567ff64ea370085a1862a3d1c579f94f38acbce69d5408327ee06840ff509b189c1e957cfa9866703db88323926ad4f1f4db84a99278f95ec9bd1f1f948 |
| SSDeep | 24:6A2x+pVbyjrgtrOV3vadfet8QJ3NuJ6uzacG++MExr1gl:6AOebErgtrOgFetnJfuJGNMEbgl |
| TLSH | CC116183C522B739C5419FFAA384AC96CDABC06F8211222062FDC1127934B7C1F097F2 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
$pp + huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$pp + huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential