Malicious
Malicious

e2fde9401fdd68daecf29ab95e99a85e

PowerShell
MD5: e2fde9401fdd68daecf29ab95e99a85e
Size: 114 B
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e2fde9401fdd68daecf29ab95e99a85e
Sha1 d47963bb421b2dc7f287a73359e6be0060c134f3
Sha256 d2ada62115df653e969f3f61b0e8dd57073f9789bab934039e718582315f46e8
Sha384 5cc9c29d7e6786b26a1f6b6b77e5bfffd1c5a3f0dbffd18907bbe86c2f5b1b0dd813731b9629ba857a80634474556106
Sha512 a5c75178e0ab2a2f5d58fbd1931117478062a08dd9e857748ca8112f0729a088e5255f1e4016b709169b9f7b26c2c5324021586492198e2cb00ca0842dfeea32
SSDeep 3:VSJJFIGFGMFI1oM3KAJJFId1sqPJH0cVERvBuIFcRkHn:s8GFGMFI1R3Ks8zsO0cK2kHn
e2fde9401fdd68daecf29ab95e99a85e
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
-args huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
e2fde9401fdd68daecf29ab95e99a85e
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
e2fde9401fdd68daecf29ab95e99a85e › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
-args huhuhuhuhuhuhuhuhuhuhu
e2fde9401fdd68daecf29ab95e99a85e › [PowerShell Command] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙