Malicious
dc496c078f2eac7064a256585363ef4e
PowerShell
MD5: dc496c078f2eac7064a256585363ef4e
Size: 105.25 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
105.25 KB · 105,249 B
First seen
2026-10-07 04:15 · 18 days ago
Last seen
2026-10-07 04:15 · 18 days ago
Last analysis
2026-10-07 04:15 · 18 days ago
Hashes
MD5
dc496c078f2eac7064a256585363ef4e
Sha1
910f67b3ce205e7b1842a0e603c14da4b3c82f62
Sha256
f0712721a0095d99f9ce6d4650115ddb63e303d8ecefaa9916861c0b331e21a0
Sha384
b34564983e7d9ce42b15e0f00eb66c38800175ef7e2ded96f481897902d477f26e0bc4aef0883a487d7a5e229ec58629
Sha512
e4e3316c322e588eb153046b9b6bf53f81cabb19183a9a1026b8eec980a59119730e7c00c68809b8d39c2d20d9db0881b54f4d944a737538cceb7cff110996c6
SSDeep
3072:z9FGNCwoZ1n4n2OFoR38+jGQnietP/sbw8do7xr:5FGNCTbn4n2OFoR38+jGQnV8do7x
TLSH
45A3E9113BC6D6A0118F9D750CC61406BFAC9537C28D2C1C3BDDB689BF829B986ADD78
3 malicious · 3 files
PS1dc496c078f2eac7064a256585363ef4eT1027 · T1105 · T1059.001
BIN[Deobfuscated String]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001~T1105
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
ise | huhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
(?i)
huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
PS1dc496c078f2eac7064a256585363ef4eT1027 · T1105 · T1059.001
BIN[Deobfuscated String]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
ise | huhuhuhuhuhuhu
dc496c078f2eac7064a256585363ef4e › [Deobfuscated String]
Deobfuscated PowerShell
UNKNWOWNmalicious
(?i)
huhuhuhuhuhuhuhuhuhuhu
dc496c078f2eac7064a256585363ef4e › [Deobfuscated String]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account