Suspect
065cdc313b853fb3cac3d5bdb146ebc2
PowerShell
MD5: 065cdc313b853fb3cac3d5bdb146ebc2
Size: 103.51 KB
application/x-powershell
This sample is a 101.1 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 2bff9eeb072e4d37e129e9d37eb7c866051be1ace3d8702fc7ddac0953ea8dcd
- MD5
- 065cdc313b853fb3cac3d5bdb146ebc2
- Verdict
- Inconclusive
- File type
- PowerShell · 101.1 KB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/2bff9eeb072e4d37e129e9d37eb7c866051be1ace3d8702fc7ddac0953ea8dcd
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
103.51 KB · 103,508 B
Hashes
MD5
065cdc313b853fb3cac3d5bdb146ebc2
Sha1
09b92cc4230ca50f10953ee35cec7458191de67b
Sha256
2bff9eeb072e4d37e129e9d37eb7c866051be1ace3d8702fc7ddac0953ea8dcd
Sha384
02de5c35fb3da794cb3821123a28263c516538c5724f2e3526a3ed09527115b4153389f4fbd143f883a07acf9d4d709a
Sha512
1284976e3262bc1de1de531ceeb53eee6cf34e8c79fa6c4fa7176157e31c512cd5b7643c0841834b2e19ab53fe48919f067110ab1e0196e32fb8dec1a93e5695
SSDeep
768:HNfPhmziQ0kdcmVeD0zBNVlBqEa6H65ITWhQ:HFPQmQ0YcmVrB/lBqEa6H6vQ
TLSH
E5A3543DAD9A123B8AF9C759C1C61907F15396973135AD0D84EF53898BA3283BCC532E
1 file
PS1065cdc313b853fb3cac3d5bdb146ebc2T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes
1 file
PS1065cdc313b853fb3cac3d5bdb146ebc2T1059.001
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account