Suspect
PowerShell
MD5: 52999b207d7a4d870abe937cf946a086
Size: 1.21 MB
application/x-powershell
This sample is a 1.2 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 87003dabea40aeb648fb310022d3cf3ad5418870210cf67eb4146d746a14a63a
- MD5
- 52999b207d7a4d870abe937cf946a086
- Verdict
- Inconclusive
- File type
- PowerShell · 1.2 MB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/87003dabea40aeb648fb310022d3cf3ad5418870210cf67eb4146d746a14a63a
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.21 MB · 1,214,513 B
First seen
2026-10-02 08:00 · 28 days ago
Last seen
2026-10-02 08:00 · 28 days ago
Last analysis
2026-10-02 08:00 · 28 days ago
Hashes
MD5
52999b207d7a4d870abe937cf946a086
Sha1
28c5f9dd891a8da187437bfe17c4ced99b7f001c
Sha256
87003dabea40aeb648fb310022d3cf3ad5418870210cf67eb4146d746a14a63a
Sha384
56982345d9205d52a29f80730e50efd64b1633e17c3fe4d6cfdd0de45331db10a80b3398d30f850d9117681d58167bc1
Sha512
9058f1b7e8cded3804be48582c09e041c1c7fbcccfeef7c83d6dba056295e601d406d03d06a723bf89d63e87a01ef5e2a9a52ee8a609d13bd2bf50dbcc6ab88c
SSDeep
24576:E1JSNGsF+XFAg/X5gI6ep8HxGozl+hA2ipGg+y7T6w/dIY:ugNt2Fr+I0R2PgP6gl
TLSH
F945237C678E12CD0D12E3BA7702F447BA9913174E81066757AD4A913AF9862FB23C73
1 file
PS152999b207d7a4d870abe937cf946a086T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes