Malicious
PowerShell
MD5: c3346fb36de3d094519ba433b54601ef
Size: 19.29 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | c3346fb36de3d094519ba433b54601ef |
| Sha1 | 6c2ec7aa9c364125be1c81a54d6c9aa27e2569c8 |
| Sha256 | 6542c5d1fa6435e6fd1ce77297920da6c3f8d726f9f425e16ae4b2694f50500e |
| Sha384 | 4eeaab9ca1d8354e2edbe98163e31abf42a63c46c8376f031a3f043499fb6504182e73edc1d822ce10d19161ae1c2a47 |
| Sha512 | 419ed0f566b6cbd07de794d6a9653b1d83f8fee8bca27c751a785b19cf6dd4cfdcf4083a30920c3b8bdd459e45103cabe76c4433cbfc64f6b08f8bba13743286 |
| SSDeep | 49152:fJnn71zT3mcAaeUl+WkAKBIyqGuZ4Xk38jNIBcDCp/FBPaaGpZhJrUdtsN7o3XwK:d |
| TLSH | F617BC3C66943466153BD1C6BA73C22B4DB490BFB20B3357698C430C3959C9EAB9A47F |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:bat
Shape
scr:ps1>scr:bat
malicious
2 nodes
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005
Shape
scr:ps1>scr:vbs
malicious
2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential