Suspect
65891a4d606a91cb732a1e29819e250f
PowerShell
MD5: 65891a4d606a91cb732a1e29819e250f
Size: 4.34 KB
application/x-powershell
This sample is a 4.2 KB PowerShell. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. It matches 2 YARA rules. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 96f74d0c19404ec8929407d96a4c5e1c92433e674c56fe8d6061571c7dbb8270
- MD5
- 65891a4d606a91cb732a1e29819e250f
- Verdict
- No known threat found
- File type
- PowerShell · 4.2 KB
Cite this report: https://app.malva.re/sha256/96f74d0c19404ec8929407d96a4c5e1c92433e674c56fe8d6061571c7dbb8270
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
4.34 KB · 4,340 B
First seen
2026-11-02 13:45 · 17 hours ago
Last seen
2026-11-02 13:45 · 17 hours ago
Last analysis
2026-11-02 13:45 · 17 hours ago
Hashes
MD5
65891a4d606a91cb732a1e29819e250f
Sha1
d18117d709ab595b548d539fb8da4c5e92e59642
Sha256
96f74d0c19404ec8929407d96a4c5e1c92433e674c56fe8d6061571c7dbb8270
Sha384
88dfe9d5dfdedb57f6aff17052a4c65b94b4001f7d802447fa760b461be6c2ff6e2f49f9620db952d7f1e27a2b230e16
Sha512
c65dc44040ce6831d44d7eb247442faed2ca24c64817da143c3a942a062508f3e1a388c96789f3d434db04125bcaa67390357e9bfbd8f4da47178d74f41efc7b
SSDeep
96:0y5PuYiHgVgBaLYBz/velIdPYoSlY9awp:0yygHLwHPlYTlEaY
TLSH
8F91BC8EBD8AA0698A737338CB6F5108FA774A23154AC604F99CA6511F3141486B8EFD
1 file
PS165891a4d606a91cb732a1e29819e250f
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1
Shape
scr:ps1
1 nodes
1 file
PS165891a4d606a91cb732a1e29819e250f
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account