Suspicious
Suspect

22afb79da7c7056e705cc9d8b237b902

Share on LinkedIn
Print
PowerShell
MD5: 22afb79da7c7056e705cc9d8b237b902
Size: 576.83 KB
application/x-powershell

This sample is a 563.3 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 256 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
a1dd8e2d3320f4524722ba32ae7e6841705a4792dbc69f6f3474ad2563f678b8
MD5
22afb79da7c7056e705cc9d8b237b902
Verdict
Inconclusive
File type
PowerShell · 563.3 KB
MITRE ATT&CK
T1059.001

Cite this report: https://app.malva.re/sha256/a1dd8e2d3320f4524722ba32ae7e6841705a4792dbc69f6f3474ad2563f678b8

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
576.83 KB · 576,827 B
First seen
2026-10-22 15:15 · 6 days ago
Last seen
2026-10-22 15:15 · 6 days ago
Last analysis
2026-10-22 15:16 · 6 days ago
Hashes
MD5 22afb79da7c7056e705cc9d8b237b902 Sha1 d7e52fb288496bfed23b257c81240b5636617042 Sha256 a1dd8e2d3320f4524722ba32ae7e6841705a4792dbc69f6f3474ad2563f678b8 Sha384 00fa0d7af1383a8e7749877bf5ab6eaa06cc714efd73b2f0b1571cf5132d1fdefcf401450dc68b4ce2e9b9e1bb4bfff7 Sha512 5546973f8494ff4310bd7a73e6867feb858e3aa4b0e3afbef7d5bb49e5cb56a422c24bb4c93cb4c5b158cd27cd6e2fcb119db6468b2fdbf63df932aeddcab54f SSDeep 12288:g2S9RkkGkHlcik3JbFfsc1x3YZCHw1pjXc:96ZZhkZh1yjXc TLSH D3C45D307A012EFF5BB820C248C6811C563826B8DE686DF56ACB4C933E1D77527B79B5

2 files
PS122afb79da7c7056e705cc9d8b237b902
BIN[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1059.001
Shape scr:ps1
technique1 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙