Malicious
PowerShell
MD5: 9b3d894d17b8ad12e440f94343c1ac05
Size: 51.58 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 50.4 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e3697c34317f04354d575164e2d88942f96a23611933e20a4de54947fd08d0ec
- MD5
- 9b3d894d17b8ad12e440f94343c1ac05
- Verdict
- Malicious
- File type
- PowerShell · 50.4 KB
Cite this report: https://app.malva.re/sha256/e3697c34317f04354d575164e2d88942f96a23611933e20a4de54947fd08d0ec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
51.58 KB · 51,580 B
First seen
2026-11-02 13:45 · 6 hours ago
Last seen
2026-11-02 13:45 · 6 hours ago
Last analysis
2026-11-02 13:46 · 6 hours ago
Hashes
MD5
9b3d894d17b8ad12e440f94343c1ac05
Sha1
6218ef36bd950a314678fd618f368ba1c00af48a
Sha256
e3697c34317f04354d575164e2d88942f96a23611933e20a4de54947fd08d0ec
Sha384
fafd1e34d3ebd2c70833546b596c14e83a44d21ec11a38368e9b3c555eb93f6394827ffef519c9b442c183afa3b2fa4f
Sha512
4599edb2e8f076e2434dd36e953727e8f31b9aa3a2aa145cbc560c6c2e883a80da31404a7d31831af67185706fee6fa1fbce0b14c4bd473168b3e69026526a11
SSDeep
768:zKkk2yhMAifxdME6ABwwKJjeBYTUTsTNGeniJhnD1RiC7Iq977SoePFj:j4MTp96GejUjsTNGsi7BR3IE7SocFj
TLSH
4A33196AC985521D5B4F37ABEC481FA8D5A840930D1318B4BDE86348DD0FDDCABACD0B
2 malicious · 2 files
PS19b3d894d17b8ad12e440f94343c1ac05T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes