Malicious
PowerShell
MD5: d18696817060120c24469684e1856c13
Size: 20.54 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
20.54 KB · 20,542 B
First seen
2026-08-08 03:15 · 2 months ago
Last seen
2026-08-08 03:15 · 2 months ago
Last analysis
2026-08-08 03:15 · 2 months ago
Hashes
MD5
d18696817060120c24469684e1856c13
Sha1
6158aa16be055652c3b4fd484d876896a141f243
Sha256
03afc80755453b8b23d9f9e78d4ed1c269180d7053a675e43b1ac0cc0a9ef4a0
Sha384
473f39c3949a8aa316ebdd354c35efec79acec10e4d7f19eb2996af079903a0c1d78f2b60d394e307c2bf1814bffa743
Sha512
bb630f42358d8cdbcea8304b0fb931ed112cfcbfc778e183aa40dc8e94ec9fca6ccd9570916f8bc54eb7fa9e69306d6bc85825401d5e0e1bf463b84484eafaa2
SSDeep
384:BUQYy6pN0Y7PB4aPOb109vuLVwLVzPKUz9zUnXWq///mXzzPahfOcW:BPYJYY7p4amp09vuLszvZUnD/Vf/W
TLSH
44926D71B624E59043F573F664AEB4509EB78A7F01B17CA0F2C48448FC91F68A274ED9
8 malicious · 8 files
PS1d18696817060120c24469684e1856c13T1027 · T1059.001 · T1059.005
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001>scr:vbs~T1059.005
Shape
scr:ps1>scr:vbs
malicious
2 nodes