Deep Malware Analysis of df89dcd02789c49841ca762266079b70 | md5: df89dcd02789c49841ca762266079b70 | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	df89dcd02789c49841ca762266079b70
Sha1	441c28e0462667fcf716a636c20a63b40a70ee75
Sha256	42e79f3e3c0cc6be649f3462400d1b315b25b86a98a65ea36e938b01a1474446
Sha384	928a4359708da0839f2e7ac4215a034d235ef7337325eb2c30e11c9e72af099df578739b8f8b846bff1c69e8eb01bb32
Sha512	3301a890e3eb72ed37e072221a6419d5251ffa3a6446cc0f80e00e9b336544a98f38b5c4bf426263e25e536640b8fe7dfa6bc2f395f8697ee4e6172823c6301f
SSDeep	24:gBOLwxIbsW54wdPKC2cEMaEHanwFI0MlK08kFW5z4aszyO:g9xIbpP30nw6JhMZ4ai
TLSH	231180147483410906F763324859F5ACE960101F51342999BD8E58C06F7CA58C9FDFDB

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

$contehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential