Suspect
PowerShell
MD5: 381ac15696f175b7fa672c8c5fff4e4f
Size: 705.71 KB
application/x-powershell
This sample is a 689.2 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 71c9ef680ba54d9324324bfb09631ecb903e956c07cd14c2b860a0ec1bdc229d
- MD5
- 381ac15696f175b7fa672c8c5fff4e4f
- Verdict
- Inconclusive
- File type
- PowerShell · 689.2 KB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/71c9ef680ba54d9324324bfb09631ecb903e956c07cd14c2b860a0ec1bdc229d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
705.71 KB · 705,706 B
First seen
2026-10-05 09:00 · 21 days ago
Last seen
2026-10-05 09:00 · 21 days ago
Last analysis
2026-10-05 09:00 · 21 days ago
Hashes
MD5
381ac15696f175b7fa672c8c5fff4e4f
Sha1
f6ef672acac467c461ff1e4eabf7e9c80da7093c
Sha256
71c9ef680ba54d9324324bfb09631ecb903e956c07cd14c2b860a0ec1bdc229d
Sha384
aac7ae5e80ec452639dc533eba87775b55a6de71d6fb9ae9b9caed14eb704dbd0b717118fe8f6092d29fa9efa26c1996
Sha512
1ce03770eeefe9bd502f01f8068458627a439b4bf72494a8040c401fc1d096a15b13e03b4e27ff71e394ae4c6a7fe2ec3a6886ec655e8902e7791a53dc756bdb
SSDeep
12288:5CqMmwColFyr+6JaksZk1zUSbsYcGNUieH0qKg6NZelmizyU2S+WDTqV3:5gCxt7JUZYcGNv7Hsemno
TLSH
37E4E01CC21CCE68142C132E6757AA8C22B7D724529CED89E4C9D3FB7699781F4ACDC9
1 file
PS1381ac15696f175b7fa672c8c5fff4e4fT1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes