Deep Malware Analysis of d02258c71d65a74d87fee569d89b2096 | md5: d02258c71d65a74d87fee569d89b2096 | Javascript | T1059.007 | PowerShell | Powershell: Hidden Execution | T1059.001 | T1027 | DeObfuscated | T1105

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d02258c71d65a74d87fee569d89b2096
Sha1	cb1e6b92b53b0396bbf8fef410d8b470a5d026e2
Sha256	97f3ddd69b71aa23045c4958562a30268747199c804ea26729a4dd8e87fabcba
Sha384	7c5faf28a4dcc2c57a4de7053ddfee5fe232a9b730983d9856bde98bfa23ba6ffd9481c03dca88fe65e32ccbb97437d9
Sha512	cfa4d9869e16d436f3705f818a5d8ab32fd8dcf4e39d1517ff9ab148693190f99afe9e1dc931870ea4304911ce3084337afd80f01c20621a31e7e19e3734ee01
SSDeep	1536:pkTjZkTBlkTQkTlkTQkTjkTlkTtkTlkTlkTjkTlkT/kTjkTlkTGkTjkTBlkTekT7:pkRkHkkkhkkknkhk5khkhknkhkLknkhi
TLSH	D873357B1C82DFD90789C429260B5ECAD5173FA3DBC2C76524863B12E11D8CE5C7BA68

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001~T1059.007~T1105

Shape scr:ps1

malicious 1 nodes

Config. Field	Value
URL in PowerShell #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

URL in PowerShell #1 URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential