Malicious
PowerShell
MD5: d2915245c0afe7b3e00d1a0875ffaff1
Size: 1.47 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.47 MB · 1,471,814 B
First seen
2026-09-09 18:16 · one month ago
Last seen
2026-09-09 18:16 · one month ago
Last analysis
2026-09-09 18:16 · one month ago
Hashes
MD5
d2915245c0afe7b3e00d1a0875ffaff1
Sha1
bde64a36832bd60f97a8a9a834ac19903c56be33
Sha256
70a77be0f5f52c00b9aff3b0fc9a5ae982d7f857d01b94a6def8ff67b7071c43
Sha384
4bf04cdc1f7f0ce7d57c5a904fb7ed221a2e2deda6e0d9b2e6d4b9ad55a48ee10173e6b5ce941004938b14d307a88f03
Sha512
ac4162e3f55548c719f6540017005b50184bf7c208bb65dbe35e4f9a282e1446173fb36b7ce3929db5be8b4693b367bd0390a16704c0115bfc449ae1b3c57a1a
SSDeep
24576:vJ6RRuYRM/siotExGAYjJNHq+gwFj2gDOcUa9f+nlF:vJ6RRuYRM/siotExGAYjJNS
TLSH
2665432EB93DB0588CCD7126A22563B1C44A5EBF23775BCB2C10FF91A642C719CA6717
7 malicious · 7 files
PS1d2915245c0afe7b3e00d1a0875ffaff1T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes