Malicious
PowerShell
MD5: eba61a8df8db080d41d1cdbfe7d9f586
Size: 2.48 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | eba61a8df8db080d41d1cdbfe7d9f586 |
| Sha1 | 212befce72fe29e037cf03987a72924b46d66509 |
| Sha256 | 81946c5aa79705e1c2d1afa61411558505b12e7943c94cf45c7b81ae5657b546 |
| Sha384 | c239f9fd3fa7bc40665dfbeb250b502a13f04c31ecf3ae1a01dc27272991dddba67571b234d6f0fd0d7e07198dd399cf |
| Sha512 | 1b94ac4d97cf98fbcba726b833462c4127b7502b0a60f478063d2e3f21483d3cc7cf518b46f6baf66e4531bc446f156fc28171d9330e3da175eaad07e7bf92fc |
| SSDeep | 48:Xkg42+Sy0fY0XQJ/aQUBn/lT4ML/ebn/pQFi+IFSy:r4dX6AJsV/d4ML/I/p+1y |
| TLSH | C251234BBD07C27595328EB34C6BB41DECE05A9312160C20BA4C89825F313BDFAD54AD |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
" & xhhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential