Malicious
PowerShell
MD5: ded7c36a38fad16d324f5dcb40cd75f0
Size: 600.09 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
600.09 KB · 600,093 B
First seen
2026-07-27 07:01 · 3 months ago
Last seen
2026-07-27 07:01 · 3 months ago
Last analysis
2026-07-27 07:01 · 3 months ago
Hashes
MD5
ded7c36a38fad16d324f5dcb40cd75f0
Sha1
c2ba5959b0f6b7264e621dd564291d5d48cc6735
Sha256
eb3842afc9fe1f3dc1cfc579f465766f1fedc6e64a0d2224e1ea7c272924f66a
Sha384
3b4ab4414980e77a77e54ac77fa72afc53f676b7db324ffcbf2cafc2c553130152aee3813163bdef84125e6f55358ff6
Sha512
e25de61fef83a8a1e41e956aa79417828c2d86bba1486f714bba8ec573b35c164c7acca2a4fc5df06370bf0bcb1057c9fefcb8428a15a4f746bdd8b5639bfe8b
SSDeep
12288:dIACxiJrxPct+e+WPmoDYBTrVVLosHSfdm51NvLGm3q46tN:tzJlPK+e+x2YREhdm5f/atN
TLSH
CED423413C993BBA1E7A4BA418FB05042EC2B9BE541DE7C136EDD489A7CF9430656CBC
4 malicious · 5 files
PS1ded7c36a38fad16d324f5dcb40cd75f0T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes