Suspicious
Suspect

4b4d4981cced060972729091f7de789e

PowerShell
MD5: 4b4d4981cced060972729091f7de789e
Size: 21.29 KB
application/x-powershell

This sample is a 20.8 KB PowerShell. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9
MD5
4b4d4981cced060972729091f7de789e
Verdict
No known threat found
File type
PowerShell · 20.8 KB
MITRE ATT&CK
T1059.001

Cite this report: https://app.malva.re/sha256/9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
21.29 KB · 21,289 B
First seen
2026-10-20 02:45 · 14 days ago
Last seen
2026-10-20 02:45 · 14 days ago
Last analysis
2026-10-20 02:45 · 14 days ago
Hashes
MD5 4b4d4981cced060972729091f7de789e Sha1 a6a44cb3a32fce98bda658ad22510899e9f59205 Sha256 9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9 Sha384 008654f4135dd11e758dec8f4e2e7d1c844e7052d63efeb92ebb82176fa80b405f0593bfa3cbe9f3205409f6ef5e3a33 Sha512 ea0e1caf3c498da53b6c5c8300c15cd06d6138cea8911a7e060ce1c479eeb9ed03d923f51b3bc93c73e9c8ed58ab8d55bea00147d7b2478d0bacdf0c51a66258 SSDeep 384:92rTXs66vi4kP+zzkr+mqsSc1e6y6HyAmwW/vP2vP2Kn0:WXn4kP+zzkr+mqspIZp8p0 TLSH C4A2C6D6A9D091F424A360185E8EC252F23A603771F9FD50BCCDD7A98F9693C227836D

1 file
PS14b4d4981cced060972729091f7de789e
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1059.001
Shape scr:ps1
technique1 nodes

1 file
PS14b4d4981cced060972729091f7de789e
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙