Suspect
PowerShell
MD5: 5a238e2d5fbe1564408fa06fbc967c1e
Size: 1.51 MB
application/x-powershell
This sample is a 1.4 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 1dfa0aa6156e456259d0dc960b76f7c20549da845a6b3452d9cd93a53684065b
- MD5
- 5a238e2d5fbe1564408fa06fbc967c1e
- Verdict
- Inconclusive
- File type
- PowerShell · 1.4 MB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/1dfa0aa6156e456259d0dc960b76f7c20549da845a6b3452d9cd93a53684065b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.51 MB · 1,510,949 B
First seen
2026-10-02 08:30 · 26 days ago
Last seen
2026-10-02 08:30 · 26 days ago
Last analysis
2026-10-02 08:30 · 26 days ago
Hashes
MD5
5a238e2d5fbe1564408fa06fbc967c1e
Sha1
0ee5280e6235589c55b29bd08e2feee5af10f419
Sha256
1dfa0aa6156e456259d0dc960b76f7c20549da845a6b3452d9cd93a53684065b
Sha384
918a3ea9aabd8bd5e8ee55882867513d03d26614ffeb8d7b7a18c02da15eb8de2d7bd4ac6902cebedcdc8a7dc3dfb74e
Sha512
778853a642bfd53560a3e9fc7e68a5b01b33bc727213d9862551e90a913fcbbf92222fa14932c11cb1ffdd185878fb4647275739e04d52411595c564f28a12dc
SSDeep
24576:uSIOudJ8K0fC/YAGhLYpmtXdiLZKaUQ+6CSdoxOstsxF9Okefu3lkb5gon0gMcYt:uSluvt0KsVtYj+6HGq3Ifso5qDz1
TLSH
BB65121A09021D76077C13790A7F2675EEE49692EA5DF3B2C1C9CA80F798642CFE1D1E
1 file
PS15a238e2d5fbe1564408fa06fbc967c1eT1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes