Deep Malware Analysis of e2fde9401fdd68daecf29ab95e99a85e | md5: e2fde9401fdd68daecf29ab95e99a85e | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e2fde9401fdd68daecf29ab95e99a85e
Sha1	d47963bb421b2dc7f287a73359e6be0060c134f3
Sha256	d2ada62115df653e969f3f61b0e8dd57073f9789bab934039e718582315f46e8
Sha384	5cc9c29d7e6786b26a1f6b6b77e5bfffd1c5a3f0dbffd18907bbe86c2f5b1b0dd813731b9629ba857a80634474556106
Sha512	a5c75178e0ab2a2f5d58fbd1931117478062a08dd9e857748ca8112f0729a088e5255f1e4016b709169b9f7b26c2c5324021586492198e2cb00ca0842dfeea32
SSDeep	3:VSJJFIGFGMFI1oM3KAJJFId1sqPJH0cVERvBuIFcRkHn:s8GFGMFI1R3Ks8zsO0cK2kHn

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059.001

Shape scr:ps1

malicious 1 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

Start-huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

-args huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential