Malicious
Malicious

c6f4df18cb880500f3921a179c3a3766

PowerShell
MD5: c6f4df18cb880500f3921a179c3a3766
Size: 55.88 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c6f4df18cb880500f3921a179c3a3766
Sha1 937e75e0e1c82eecab69e9b8ad481bd7e0845308
Sha256 be99857449d2856dd5a84e21c8a3d5e0e01456adb44062ddec5a6b4970d8d42c
Sha384 d9ba2b4c9bac7ae625b5d2a534a8bf95450d29288471181f8791b6618fa0c7747069a4d2615da16a7ed79b32ed5978e6
Sha512 52ebe4e712dc3820331ec53f6ce0029047c1d0bd67e31ff864eddfa3d3a049c441a2831a09ca9cb5a5d87297ad962cd292e9793e106cfbdc55fcdbebe7133a68
SSDeep 768:nzRraObp9Aps2zOX3+cLNqO5YxytVYGnH3h72MRDxjqP2QN77iyFMqXGrvfcQF:ndhUw/M5xOqgH52MDY2QN7HJ2r8G
TLSH E343083A658A113873E3E0AF5D499845AF29F16B36442D14789CF19CDFCC674C3EA2B8
c6f4df18cb880500f3921a179c3a3766
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
Prohuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
uses huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
c6f4df18cb880500f3921a179c3a3766
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
Prohuhuhuhu
c6f4df18cb880500f3921a179c3a3766 › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
uses huhuhuhuhuhuhuhuhuhuhu
c6f4df18cb880500f3921a179c3a3766 › [PowerShell Command] › [PowerShell Command] › [PowerShell Command] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙