Malicious
PowerShell
MD5: 2726106d5a06e45dd404d3f28a75eeb1
Size: 68.46 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 66.9 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 5 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- dfd739995ee2dfe3070a196554d67a3b1a8c008abb7d0bd286e95cbbee85514b
- MD5
- 2726106d5a06e45dd404d3f28a75eeb1
- Verdict
- Malicious
- File type
- PowerShell · 66.9 KB
Cite this report: https://app.malva.re/sha256/dfd739995ee2dfe3070a196554d67a3b1a8c008abb7d0bd286e95cbbee85514b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
68.46 KB · 68,459 B
Hashes
MD5
2726106d5a06e45dd404d3f28a75eeb1
Sha1
3bc941fa3c574f70544c118c09e2fb827a945e60
Sha256
dfd739995ee2dfe3070a196554d67a3b1a8c008abb7d0bd286e95cbbee85514b
Sha384
c83b8bccdc017e63b0a6b72b08d46f4e0575d23782651525dc853ee59807cdd5c759c60cb9bff889e342c924e0aef9e1
Sha512
ebdcca1b97d094d706ee3ac39d63564634f953ad6f17674967180cb6d9025fa88e6e09811b1502b49a790e0c144ef8f127ec9d35a5d6d1de31ca670bc5c76ea9
SSDeep
1536:VKFv8IbqkN9+SWPAL64re36oJ9rHn5vkj:VC8oNKPqf636IrHn5vkj
TLSH
BF637F3498E635750D838ADAF9CA351680BDC515032E5CBDF6CB1B09A032B7CB6F992D
4 malicious · 4 files
PS12726106d5a06e45dd404d3f28a75eeb1T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes