646edbee917ea0e382cdf2334607d450
This sample is a 2.2 MB PowerShell. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- c5a642cf2477e9e87eb9c3d8008b6d50befb6a5431d833bb4018bf73704fdad4
- MD5
- 646edbee917ea0e382cdf2334607d450
- Verdict
- No known threat found
- File type
- PowerShell · 2.2 MB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/c5a642cf2477e9e87eb9c3d8008b6d50befb6a5431d833bb4018bf73704fdad4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
scr:ps1~T1059.001
scr:ps1