Malicious
ffea05448402921cbb15ee9dae52cfc9
PowerShell
MD5: ffea05448402921cbb15ee9dae52cfc9
Size: 103.52 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
103.52 KB · 103,519 B
First seen
2026-09-03 13:15 · one month ago
Last seen
2026-09-03 13:15 · one month ago
Last analysis
2026-09-03 13:15 · one month ago
Hashes
MD5
ffea05448402921cbb15ee9dae52cfc9
Sha1
6aa436164310d17e23d51ed6e2d04719991f558d
Sha256
c7f8168ea436c1b7c32d0f263e265e293bb02380c9903e7b612769fc58a1001b
Sha384
7fbe43f53c0ea781bf3ab4fe4d8383437b3db2d5c16afa7e5813f4f064140271e59bcf55b537ee83d9308325cbff008b
Sha512
6e1ad75c1271da81234c61a15f0d08ff206fe00e6cab7e6a35673d817974afd80c19a31a50be8c62c5c43cbac32a26faf1dc276f50b9139bed4d7eaa339eaf41
SSDeep
1536:l6udyFxOKjE0ELd3fF8axrPrSpr6LndkWfCgfEmR:lvVAafR
TLSH
4FA3279313850BBDF68D0EC8C98E211721F1E5677D651288EFB36EEBBC3B8845434A65
3 malicious · 3 files
PS1ffea05448402921cbb15ee9dae52cfc9T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
3 malicious · 3 files
PS1ffea05448402921cbb15ee9dae52cfc9T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account