Suspect
PowerShell
MD5: 318c2b68060b5432dece3956ec02ef06
Size: 1.04 MB
application/x-powershell
This sample is a 1013.6 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- b003c026b2e1e32e357d66d93ad46b45a5bec3552297d58aa19ae202462a8537
- MD5
- 318c2b68060b5432dece3956ec02ef06
- Verdict
- Inconclusive
- File type
- PowerShell · 1013.6 KB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/b003c026b2e1e32e357d66d93ad46b45a5bec3552297d58aa19ae202462a8537
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.04 MB · 1,037,953 B
First seen
2026-10-20 14:17 · 9 days ago
Last seen
2026-10-20 14:17 · 9 days ago
Last analysis
2026-10-20 14:17 · 9 days ago
Hashes
MD5
318c2b68060b5432dece3956ec02ef06
Sha1
def85fb8a30ce20c31a07de8a2e88cb8214bab92
Sha256
b003c026b2e1e32e357d66d93ad46b45a5bec3552297d58aa19ae202462a8537
Sha384
e4e0178383b24f4136a22b4879b99cddd724400158e4c310409167cdc49bdab6f2609a1ad78311aa895d6c1ee58ffd41
Sha512
00be33113b3a91a119255131d503d4b9961ffd9418c9e8ba8a05436412c07bf129b4fda551df6d336d6e7dcfc572298dd7af707d100e1952401a18f2a64aad32
SSDeep
24576:eCXbbNH6/3iChpb+PpaGfbzto4/j0v34r1ZnFe/tIi/:eko3/rajfXQf
TLSH
432523285D6A52FB0723B1BCB066F24466CD66DBD4868A221A3DC1F133B1F60DE57C74
1 file
PS1318c2b68060b5432dece3956ec02ef06T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes