Suspect
PowerShell
MD5: 54a9991c965d8927b93d110a37accd26
Size: 1.09 MB
application/x-powershell
This sample is a 1 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 78be24965e3c95bcc64de28e51e9ddf7ad91ce920a05a483a8cdf7e1be80294d
- MD5
- 54a9991c965d8927b93d110a37accd26
- Verdict
- Inconclusive
- File type
- PowerShell · 1 MB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/78be24965e3c95bcc64de28e51e9ddf7ad91ce920a05a483a8cdf7e1be80294d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.09 MB · 1,091,728 B
First seen
2026-10-06 09:00 · 26 days ago
Last seen
2026-10-06 09:00 · 26 days ago
Last analysis
2026-10-06 09:00 · 26 days ago
Hashes
MD5
54a9991c965d8927b93d110a37accd26
Sha1
8976941573c175f5103d9c8a7ae58321cf2a0e7b
Sha256
78be24965e3c95bcc64de28e51e9ddf7ad91ce920a05a483a8cdf7e1be80294d
Sha384
b6798bea635188e1295440c8943023479aa689303dffad1690dbf31b33e715a9870b76f3d2575ad15ad4c528435d9d9a
Sha512
81591416781626087ef74321baece900509ac63d34f3519a080ff3001fac7ce90a90ad02ac3c00ddb1f5ab98746fb7399b97aa563809a7829bd45ea08fce1bc4
SSDeep
24576:+/5wtrcrhteXVHtU6NLoz+t7Jj5TEpN1I8BXQ/5:ar3eXvT0Wsro
TLSH
C0352339DAAA64DD0E01D162FB167864F2CEB38B4502033B51BD83F571E95E0B7534B9
1 file
PS154a9991c965d8927b93d110a37accd26T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes