Malicious
PowerShell
MD5: d902e741f9aef0ea68180401a424efc1
Size: 16.91 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
16.91 MB · 16,913,632 B
First seen
2026-08-11 08:16 · 2 months ago
Last seen
2026-08-11 08:16 · 2 months ago
Last analysis
2026-08-12 03:45 · 2 months ago
Hashes
MD5
d902e741f9aef0ea68180401a424efc1
Sha1
fdc5b71b1c24d215865f78764f4a5525487deaf9
Sha256
f2fb4519b2950ce5db7192265ddb4f6ebee9430b74bc56a1053dfe551d1e878e
Sha384
732db6a12176e7c766e0f76750413c341eeb0a5f893b42ecbccff54ae21c1c76ab1203b305cab3e4b0ae3350e04e1f0a
Sha512
3f8707b82191d8d8eb4b92674ee05ee6aff22b6ab54e985634198e024ce6243d49d2024cb3149eeac650ac0c11dd5d95c69c7fbdaf1545c92f479f9d281bfe1b
SSDeep
384:5TKtiq+OV9UopXCq9XJopvk0SsXii9+Hicrop4m0/wGFUsh4y5ov6nId1HCBL46c:526fMK
TLSH
72074DD8875B5FD6721F0C1680BB5DC263E2FEC5DEE024C06281DB97E02E6454AED8DA
4 malicious · 4 files
PS1d902e741f9aef0ea68180401a424efc1T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes