Malicious
PowerShell
MD5: dd77823d9bca477da1d8b252bb844b1b
Size: 618.46 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | dd77823d9bca477da1d8b252bb844b1b |
| Sha1 | acf8310ad10fd84b8f11d33d3d0dea5f6e40b6ef |
| Sha256 | eee655f63b350b39178794a4f8d6093ba124f4fe95563396c9da163e0b349f96 |
| Sha384 | 9ed9845770b6a5c1be0900a9b217c841e68751b363ec26aff50a43f85fe0f3fa93f2c956a15b7ebf168b837ff9b50d8e |
| Sha512 | 78076f406e8f12b716acf0bfcb9faece609115c1cda195dcf71cc54799efce931a964cdd71359ec38599f24c89df09c44e67b748489afae8273db1a1db18df60 |
| SSDeep | 12288:nZI3KAZo/11O8Lsn+D3Fgxo4WURnY+7Xkr4+CaISVj:ZWKAZoHr5RVj |
| TLSH | FDD46D347A022EFF5BB820C248C6811C553C22B9DA682DF56ACB4CD3395D77627B79B1 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001~T1105
Shape
scr:ps1
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential