c4e1468c2cddde592e7a7928653656b9

PowerShell

MD5: c4e1468c2cddde592e7a7928653656b9

Size: 216.09 KB

application/x-powershell

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	c4e1468c2cddde592e7a7928653656b9
Sha1	c4bcba533ee6940e40e77f7912766c33a35d04fa
Sha256	a38f40577566f1bd0087c8ea1114664878ceeca700ea5f34cbcca4eab500f44e
Sha384	1a24b100fa642a489611fd355079a02564665c7f00875925c29e4dcf65b96fffd6fb01d3b709753870efe2dd98cdc24a
Sha512	dd8a92c95f21397a5a44fb0ac55c5615971105878a8298bba63757b27c48c01bae936b79db00d88cd2367ec4668bc6d9b89f23eaf39e3fe0abd79fdca8a37ba4
SSDeep	3072:NYjHjD1kG/FnKNWzEof0RoWNFrEbR1GD0cTiLqPe1Tf7UfltL2M8q9vjLz0qrm0+:kJ/FnUBDrEXGDtTiLqML7OlbDJPz0Hpz
TLSH	A124841139C0A375164EDCB72D814C199ED9F533D38A985C7ACE49C5AF87AF886E8C38

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001~T1105

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

(?i) huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

ise | huhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

Deobfuscated PowerShell UNKNWOWNmalicious

(?i) huhuhuhuhuhuhuhuhuhuhu

c4e1468c2cddde592e7a7928653656b9 › [Deobfuscated String]

Deobfuscated PowerShell UNKNWOWNmalicious

ise | huhuhuhuhuhuhu

c4e1468c2cddde592e7a7928653656b9 › [Deobfuscated String]

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.