Suspicious
Suspect

5a238e2d5fbe1564408fa06fbc967c1e

PowerShell
MD5: 5a238e2d5fbe1564408fa06fbc967c1e
Size: 1.51 MB
application/x-powershell

This sample is a 1.4 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
1dfa0aa6156e456259d0dc960b76f7c20549da845a6b3452d9cd93a53684065b
MD5
5a238e2d5fbe1564408fa06fbc967c1e
Verdict
Inconclusive
File type
PowerShell · 1.4 MB
MITRE ATT&CK
T1059.001

Cite this report: https://app.malva.re/sha256/1dfa0aa6156e456259d0dc960b76f7c20549da845a6b3452d9cd93a53684065b

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
1.51 MB · 1,510,949 B
First seen
2026-10-02 08:30 · 26 days ago
Last seen
2026-10-02 08:30 · 26 days ago
Last analysis
2026-10-02 08:30 · 26 days ago
Hashes
MD5 5a238e2d5fbe1564408fa06fbc967c1e Sha1 0ee5280e6235589c55b29bd08e2feee5af10f419 Sha256 1dfa0aa6156e456259d0dc960b76f7c20549da845a6b3452d9cd93a53684065b Sha384 918a3ea9aabd8bd5e8ee55882867513d03d26614ffeb8d7b7a18c02da15eb8de2d7bd4ac6902cebedcdc8a7dc3dfb74e Sha512 778853a642bfd53560a3e9fc7e68a5b01b33bc727213d9862551e90a913fcbbf92222fa14932c11cb1ffdd185878fb4647275739e04d52411595c564f28a12dc SSDeep 24576:uSIOudJ8K0fC/YAGhLYpmtXdiLZKaUQ+6CSdoxOstsxF9Okefu3lkb5gon0gMcYt:uSluvt0KsVtYj+6HGq3Ifso5qDz1 TLSH BB65121A09021D76077C13790A7F2675EEE49692EA5DF3B2C1C9CA80F798642CFE1D1E

1 file
PS15a238e2d5fbe1564408fa06fbc967c1e
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1059.001
Shape scr:ps1
technique1 nodes

1 file
PS15a238e2d5fbe1564408fa06fbc967c1e
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙