Malicious
PowerShell
MD5: 62f930a3ec3f36891b2d3bff4e4b7c2d
Size: 6.77 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 6.6 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 7 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- eb3c504ba48a4bd4a5493efcd095f431e5a243e691593518968ce1c85b01e2d2
- MD5
- 62f930a3ec3f36891b2d3bff4e4b7c2d
- Verdict
- Malicious
- File type
- PowerShell · 6.6 KB
Cite this report: https://app.malva.re/sha256/eb3c504ba48a4bd4a5493efcd095f431e5a243e691593518968ce1c85b01e2d2
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
6.77 KB · 6,772 B
First seen
2026-10-27 07:30 · an hour ago
Last seen
2026-10-27 07:30 · an hour ago
Last analysis
2026-10-27 07:31 · an hour ago
Hashes
MD5
62f930a3ec3f36891b2d3bff4e4b7c2d
Sha1
8af3ebdd0c975e986f016b1481536426064a0aa6
Sha256
eb3c504ba48a4bd4a5493efcd095f431e5a243e691593518968ce1c85b01e2d2
Sha384
586866188990cb5329db340cc8e358c64760fef00fbfcbcafb62c4c97afce6b859d804b4d117be22d146d4b57921258d
Sha512
7a520ca07108d3e8c71130513c94baf1dd9b73f9b36a4c4f57256538a678c983ccb45cac155634d18f4508d3615b2389000f0d2af481b96137664d74c890d6a1
SSDeep
96:tXzW/8cvNCQteBO+2+4b9ikcD2tzXRD3sRrHJpqRMmFdhz6CYIVMrwwb6k:tXzmvNzEBO+ub9Bl+7qR5YIV0wwb1
TLSH
A0D1FF9EAE565054DAB2733D8B1AC100E937442B0503DA5D75CCC2986FB10AC8BF8EF5
3 malicious · 3 files
PS162f930a3ec3f36891b2d3bff4e4b7c2dT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes