Malicious
PowerShell
MD5: ebd567bb7953be5dd8be9b98ae39c031
Size: 1.09 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.09 MB · 1,092,534 B
First seen
2026-08-30 10:45 · one month ago
Last seen
2026-08-30 10:45 · one month ago
Last analysis
2026-09-02 11:48 · one month ago
Hashes
MD5
ebd567bb7953be5dd8be9b98ae39c031
Sha1
94a375db5b34a672348cd1bb847be9004de1aff0
Sha256
7404b53e27b9a0c6a53a6f01f57874b64acec513ebc90abc38f7f8096bc91cb0
Sha384
ef7dd90ec5ba5e2355e27b35a37d3e849150df339f431e631f357fe8f5788c8553612bcc620e70fac8e81d5e26fca6c1
Sha512
99163245fc57ead1cda27cbd85344ad74f5d74d53793002158739b730aa000d132a4184829a71cd790e5870cd8f5d9cc73a9bff099784d6129871c6957374727
SSDeep
6144:kn0ntn0n0nvn0nIn0nvn0non+nfninfnfnWnfnfnfnVnfnfnSnfnfnbnfnfnwnfT:C5SetpiBS5tRkS21cWQa1JDySoLy9
TLSH
7B35E50B0B3C67379FA903715429C54613E84EC5E8B2AF1C6A2DC4B86DB4E1F56A85FC
11 malicious · 11 files
PS1ebd567bb7953be5dd8be9b98ae39c031T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes