Deep Malware Analysis of e2ce8a13076ab1b9d89bfdb7987f0194 | md5: e2ce8a13076ab1b9d89bfdb7987f0194 | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e2ce8a13076ab1b9d89bfdb7987f0194
Sha1	754415da9f816d7ee4acdad52ed1c06d0576311f
Sha256	04eed5ddea960ea0cf2f2c18d013de95ada3322f1ad7c8a1aa3dba4fb379937a
Sha384	0a9cda772fce37719c68b6086b11982998e71c15ccccbdceb96484c187b366f2ac2175f52b40354f535016367b83db87
Sha512	acd2382d6bdf6d45baeae131ad9768b6c8e23c571520e560257bb7b87c2ee90f8b74f4e2553706f9185f1721f68444dee1fdb7fd496e9d581e892d265c2b2b09
SSDeep	12:eR9csxOZzjrA7rE5c9D9OzbkVnsEL3uMeVYPUXSbCMhe:Y9xijr8rEK9hp0VFX+Bhe
TLSH	ADF041A307A4C81880886860A328B4E2C42B695A700D4C01B5F4CE49E234B5EB2D829A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

$w = Nhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential