Malicious
PowerShell
MD5: f562b6321a57fed63908b9da8a85095e
Size: 74.06 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | f562b6321a57fed63908b9da8a85095e |
| Sha1 | d6317ca0e0a24d7f30be8695d3a6d135c891641e |
| Sha256 | ecec58da164af1e6a7c4ae982a3172410de9108f40d46a3c7d97cb3dc5d777c6 |
| Sha384 | e1b6a8924b76cc5e3c51fdc03900960f7066b1be3fe65ba4136b0ad1bb9b32839ac1ffc56d9895c6877d309dba4cc126 |
| Sha512 | fc5f9a51477e9d1a17d041219048e79538d1c9e360290230ecef3e4119b35789e013f28275f491590ffe1065d0e88d5da7f48ff5f3891610efaaafbf207e5abc |
| SSDeep | 96:eGb3RuDyjl4xjHjZnlUjsuCwy8YKQnsBXFu1GNnKVbGwpAUyjZwiblwL5DYf:eEeyyHjZnRuCJKtNgVaw6jZw2lwLtYf |
| TLSH | 6C735A0F176191042FFE16CC68BD457A4E26E51A0B7F89EE19C38F0DE59BC8BA940793 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001
Shape
scr:ps1>scr:vbs>scr:ps1
malicious
3 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
& (oluhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
" & vahuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
& var_huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential