Malicious
d5557c8e4a42ceb04fe2fe270c93f231
PowerShell
MD5: d5557c8e4a42ceb04fe2fe270c93f231
Size: 6 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
6 KB · 5,995 B
First seen
2026-09-01 18:15 · one month ago
Last seen
2026-09-01 18:15 · one month ago
Last analysis
2026-09-02 11:51 · one month ago
Hashes
MD5
d5557c8e4a42ceb04fe2fe270c93f231
Sha1
b0250ebd020a8dbf23253c8f7a8c1d42c6781a1a
Sha256
705861f94f918b7c8bfa471cd90730037f73384976e7e9ee51f169e8ea0f066c
Sha384
3932abfc1c33882562a17d3dd1d60a49524531e193c23f188d32f48b8531057fe634e6b64b371757de8b14d5b2d73fc7
Sha512
0b5221985a815aa1a14578fa4de5310b1f823c43a1b3f4aa6d989045f5f5205ebe4c75db27266df194c4ecbedee7104f39a7f183caee146400ee99904f2ae8f9
SSDeep
96:Hge5PKf3YlW5aqoQt4BnQLk3i16RkICJ0AxzrO6Bg4UGj0lFTTomt:Hge5ifol1qd2B4cnUJ0G5Bg42FUc
TLSH
1FC1DA3BFB58CB7D608A55AEA5C23E0A5B05802E713A15F0D3F5C54457BBFA12E2D234
3 malicious · 3 files
PS1d5557c8e4a42ceb04fe2fe270c93f231T1027 · T1059.001
BIN[Deobfuscated String]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
ise | huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
(?i)
huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
PS1d5557c8e4a42ceb04fe2fe270c93f231T1027 · T1059.001
BIN[Deobfuscated String]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
ise | huhuhuhuhuhuhuhuhuhuhu
d5557c8e4a42ceb04fe2fe270c93f231 › [Deobfuscated String]
Deobfuscated PowerShell
UNKNWOWNmalicious
(?i)
huhuhuhuhuhuhuhuhuhuhu
d5557c8e4a42ceb04fe2fe270c93f231 › [Deobfuscated String]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account