Malicious
PowerShell
MD5: d5625eb29e3176a2a20c3274636515e3
Size: 15.1 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | d5625eb29e3176a2a20c3274636515e3 |
| Sha1 | 32cfb449153dbb7f533015efc10c9eb3496ba722 |
| Sha256 | e088d53914498cb5e229b087862e3c3c3d9136b55ebc198b5e922f1d68dcb39a |
| Sha384 | 28419b4529a1121e0a2d7cd737d1e1bba7df53757a5d079c94438d4120500f39a217863cdafaed5a320b4dfe5fda1bd1 |
| Sha512 | c9f47583ec3c8f53399c8047f5ff09399a7be04faa78d23b368985d11bb3a53b5b7fcf4159000dba5e62e08c0dfbae880382a15458ff15f516ac2659a0acaa1c |
| SSDeep | 48:3WWksT3WHsT3Q76b0/xoSkBvA0WWuuFuuuuuuS5ZGWJW/sTEWlG:/ksKHsZXEY/s5E |
| TLSH | DC62FDFCDA543CD0F3E761EC391DBA020888E76F96018C99B88D16A7EB2C25D6D79147 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.005>scr:vbs~T1059.005
Shape
scr:ps1>scr:vbs
malicious
2 nodes
Path
scr:ps1~T1027~T1059~T1059.005>scr:bat
Shape
scr:ps1>scr:bat
technique2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential