Malicious
PowerShell
MD5: f6ea089e71aad87d27c5e58e814ca496
Size: 3.44 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | f6ea089e71aad87d27c5e58e814ca496 |
| Sha1 | 27acf4ed76514444acdf971d8b8715f5a39e24a8 |
| Sha256 | 84dfb09549ea2d5dddd5c078660d39587307290525a131801a70c4310494c743 |
| Sha384 | ec67cf23a99529187627f5f8723ba33b6b58be648d81afb6e36d01d6028651957d03338a1db08f94e1ac1fcc6b32ab6c |
| Sha512 | 77dcd41901ded9b481b5771c0a07510563acf52f6e9b2fa1dd6d861a8d1be82cb11696be84975313221a888ca78f3d15817afb07edb8681c62d6d117b1753538 |
| SSDeep | 49152:jrOn3wyM3IVQJzr67CjM61u0BKYuKf0z4Du2me8EaX:W |
| TLSH | 18F5025189C43FE8EF69961840FD962E93F14A9B5C2D7D49AB33BD46EFB3500820718B |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005
Shape
scr:ps1>scr:vbs
malicious
2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
" & Erhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential