Suspect
PowerShell
MD5: 791c0836406c3b35b3f0797160c1f6b9
Size: 1.55 MB
application/x-powershell
This sample is a 1.5 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e380ccc60436da1b923f33e332c3a1a038b220a7510d4fa07fd3a61ce3e93689
- MD5
- 791c0836406c3b35b3f0797160c1f6b9
- Verdict
- Inconclusive
- File type
- PowerShell · 1.5 MB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/e380ccc60436da1b923f33e332c3a1a038b220a7510d4fa07fd3a61ce3e93689
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.55 MB · 1,546,831 B
First seen
2026-10-02 07:30 · 24 days ago
Last seen
2026-10-02 07:30 · 24 days ago
Last analysis
2026-10-02 07:30 · 24 days ago
Hashes
MD5
791c0836406c3b35b3f0797160c1f6b9
Sha1
d2323a0b61f84e095bb830dc529711f4a51a699b
Sha256
e380ccc60436da1b923f33e332c3a1a038b220a7510d4fa07fd3a61ce3e93689
Sha384
c13f5f2d0ed8d71c5a2bce2b4bcd2134bf2d918e2b27160f2a21a0cafa1d743d4f80fc65f2ef242b8a0cbbd38465be62
Sha512
62e80c441b0b2d52fad2c99750e6506fb8c07202de59050e6b315eac53eeda0b2031fe9da1935f8843fffe33f02e286a84040a660ae24066d7242fcd5f121265
SSDeep
24576:kIlbU6txewij37d+MFzuNdk4Y/n+pogDa/eFnp512AY75i:kKD3ef3lF6NdkdNGnUi
TLSH
C265232C0FCD19DE8951A2FAFAD49C16F19C328748031213136DD6A43AE95B49F7BCA7
1 file
PS1791c0836406c3b35b3f0797160c1f6b9T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes