Malicious
PowerShell
MD5: 98c857884edb48c884fbaee92cf82d90
Size: 3.8 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 3.7 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 7 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- dba5f58bf9d204972c955b92c0c13e94acfe5bab99d192876c75d1e57cadde63
- MD5
- 98c857884edb48c884fbaee92cf82d90
- Verdict
- Malicious
- File type
- PowerShell · 3.7 KB
Cite this report: https://app.malva.re/sha256/dba5f58bf9d204972c955b92c0c13e94acfe5bab99d192876c75d1e57cadde63
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
3.8 KB · 3,804 B
Hashes
MD5
98c857884edb48c884fbaee92cf82d90
Sha1
bfe5428ed1552dbe35cfe066c9816094fb4703da
Sha256
dba5f58bf9d204972c955b92c0c13e94acfe5bab99d192876c75d1e57cadde63
Sha384
78a0e4ecac6db84cc7d5d1c6ea0ee2c2909bf87a676cddc27e316f0a5634b16e5d39b3bca8fc03440ad11cd0c37a5e98
Sha512
51940848ade2e80031d02768d94e5429fc20773755e240b2c707d22b444264dbe85fadafbc9d70126f45cb84e44db5b848bf0cccee91eb5466ebdb89ca658fe8
SSDeep
96:3vycO2jNy9eRBqxBDtobGD62w3Aor2KBa:3vJyU/qxBDtobGDx4Aor2KA
TLSH
BF71FF8D2DC9601889B773BDCF2E821BE75260670606D158B9BC92D19F7402D47B8EFE
3 malicious · 3 files
PS198c857884edb48c884fbaee92cf82d90T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes