Malicious
6172b8bf21f87ee01e837e2a783b8349
PowerShell
MD5: 6172b8bf21f87ee01e837e2a783b8349
Size: 7.88 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 7.7 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 39a7a7b06b9551a61f65c556899c2fe3b2d30f880e195014d9a38d16e5255657
- MD5
- 6172b8bf21f87ee01e837e2a783b8349
- Verdict
- Malicious
- File type
- PowerShell · 7.7 KB
Cite this report: https://app.malva.re/sha256/39a7a7b06b9551a61f65c556899c2fe3b2d30f880e195014d9a38d16e5255657
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
7.88 KB · 7,880 B
First seen
2026-10-14 06:00 · 11 days ago
Last seen
2026-10-14 06:00 · 11 days ago
Last analysis
2026-10-14 06:00 · 11 days ago
Hashes
MD5
6172b8bf21f87ee01e837e2a783b8349
Sha1
f2e892d0a28f0910a149e2a4afef5e04c8731002
Sha256
39a7a7b06b9551a61f65c556899c2fe3b2d30f880e195014d9a38d16e5255657
Sha384
6b0c63ce5706af89bac8905b978fae10fb11a87f9d86cbefdb0a26fd1d55fc86eeb4ca0bdbc9fde3ec2f56b57958ce7d
Sha512
04c8046c4551b21de83409f3fa9ee94363b5f74d2edc64426231dbd1036853b65e4b531955de05ec9b076312fbaf6e5545d9997b6f7d55ca1e6397595f28c10a
SSDeep
192:amJ5IMJZPeHYAH7c8WGVzw62F4YvA5zzD/:X+MJV7P8WGVU62CYvUzD/
TLSH
5DF127D62D3686BCF41890BC918E28C96D51686E4DA0C5FC4B3B61ECFA74311C3753B1
4 malicious · 4 files
PS16172b8bf21f87ee01e837e2a783b8349T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes
4 malicious · 4 files
PS16172b8bf21f87ee01e837e2a783b8349T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account