Malicious
PowerShell
MD5: ef4eed6cbfb0611a80941887eebfabb1
Size: 17.91 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
17.91 MB · 17,906,816 B
First seen
2026-08-12 08:18 · 2 months ago
Last seen
2026-08-12 08:18 · 2 months ago
Last analysis
2026-08-12 08:18 · 2 months ago
Hashes
MD5
ef4eed6cbfb0611a80941887eebfabb1
Sha1
b847e7edbb52a534beb593104b0585cdd315dcdc
Sha256
ec5a1dc0d9ae6c53b11f07b5e9d3ccf6915e421574c692d96dcf6532af04f8c5
Sha384
4d8e2d67359011a348f459c88a9888e1a5b9b73d28a89d06c82f29234d604b29fdf41d551befc7b2a08bbf6091575351
Sha512
bc51630b5019be4becbc1b86cb2aa2d612fbb9ee63df61bb1430a0f3c7e0f257042679c1067609ce1bc09709f3aec3dd2a88fcbef501fdc315345df542d13188
SSDeep
384:gcpd8yD8UIvmofbzTyAkpAK9+fR2iEyCIXFcgOwSazdgFcJ1NFI546OcCReYXD69:5j/84Rn
TLSH
0A076FFA26484ED4CCD9A412A57037BF81B98D2DA58F069D87F00743D982AB363D357B
4 malicious · 4 files
PS1ef4eed6cbfb0611a80941887eebfabb1T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes