Malicious
Malicious

f9cbe4319cbf4d1c492f3b7f110234c9

PowerShell
MD5: f9cbe4319cbf4d1c492f3b7f110234c9
Size: 1.04 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f9cbe4319cbf4d1c492f3b7f110234c9
Sha1 cccd8cad8a80d0ecce0f8f75c4db646477e3f971
Sha256 c8a927dec855055f92981db32907da6f3d5e0223e6dab5fcd66481858d362864
Sha384 8ec9813d27b0862a37f8ac7d1ffad67d5f05b10c3e83e5de642d3518b4ee19ac825cdb69e50a006a7299efbff1a1cfed
Sha512 515d54b17abe0e7083ead9d6ea7ccab01f1493ac7b25809b92afc07345cac1c3e287975cfd25f74a6124b5bda4d3125e5db0bf12e936a4b826610d7e934ef172
SSDeep 6144:snjnjnJRnknznAnknLnjncnWwQnkn2nOnXnLncnWwQn2njnmnjnDnjnRnjnjn6n3:J
TLSH E525A2170B3C27379FA813B11419D50A23F88AC5D8B6AF1C662DC5A4AE78E1F16B45FC
f9cbe4319cbf4d1c492f3b7f110234c9
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes
f9cbe4319cbf4d1c492f3b7f110234c9
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙