Malicious
f9cbe4319cbf4d1c492f3b7f110234c9
PowerShell
MD5: f9cbe4319cbf4d1c492f3b7f110234c9
Size: 1.04 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.04 MB · 1,043,138 B
First seen
2026-08-20 08:04 · 2 months ago
Last seen
2026-08-20 08:04 · 2 months ago
Last analysis
2026-09-02 11:38 · one month ago
Hashes
MD5
f9cbe4319cbf4d1c492f3b7f110234c9
Sha1
cccd8cad8a80d0ecce0f8f75c4db646477e3f971
Sha256
c8a927dec855055f92981db32907da6f3d5e0223e6dab5fcd66481858d362864
Sha384
8ec9813d27b0862a37f8ac7d1ffad67d5f05b10c3e83e5de642d3518b4ee19ac825cdb69e50a006a7299efbff1a1cfed
Sha512
515d54b17abe0e7083ead9d6ea7ccab01f1493ac7b25809b92afc07345cac1c3e287975cfd25f74a6124b5bda4d3125e5db0bf12e936a4b826610d7e934ef172
SSDeep
6144:snjnjnJRnknznAnknLnjncnWwQnkn2nOnXnLncnWwQn2njnmnjnDnjnRnjnjn6n3:J
TLSH
E525A2170B3C27379FA813B11419D50A23F88AC5D8B6AF1C662DC5A4AE78E1F16B45FC
11 malicious · 11 files
PS1f9cbe4319cbf4d1c492f3b7f110234c9T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
11 malicious · 11 files
PS1f9cbe4319cbf4d1c492f3b7f110234c9T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account