Malicious
PowerShell
MD5: e6043aa4f57d642b4eb74a33b3fae7a6
Size: 28.53 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
28.53 MB · 28,530,288 B
First seen
2026-07-29 12:31 · 2 months ago
Last seen
2026-07-29 12:31 · 2 months ago
Last analysis
2026-07-29 13:35 · 2 months ago
Hashes
MD5
e6043aa4f57d642b4eb74a33b3fae7a6
Sha1
a83752b1e366fd6c7b7c3cd0f2e6c9b20b79be15
Sha256
ec3f7bd79784eb5589f9692952d30b25493aae28d054eaf8fd30e90d399064b3
Sha384
d4502df66781978cdd658f4388caabb16a6265ca7d0cd57b5c65724388ef7314256e2bc56225d091c0acd50e71ced8d7
Sha512
e00d7a0b12d65e68b40ec6dac321cc463c4e0ef78ee151041015649b9c4c753925c23a6c13a9e51501800d22831b85c33b967a25d89ad8307a2fa235a2c88fd1
SSDeep
192:NGwbe68z6TV1OessklkRU0tVzmwJ8/5YNp3Maw6FBmD6QSHggdYCDPxQ0jx1cqID:w5vmJHoFPBdNxCx4
TLSH
7157A9EB31850D07B17F36298C0993FD0A6BD6253AB4AED299C1BE9EC351C618DD1363
4 malicious · 4 files
PS1e6043aa4f57d642b4eb74a33b3fae7a6T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes