Suspect
PowerShell
MD5: 9fdededd413a5a34e42bfc9673fb7988
Size: 3.34 KB
application/x-powershell
This sample is a 3.3 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- cd8aeb8d084d1a658bf0f4c10af8960f04af3fea3932097d60c50b912e5e7499
- MD5
- 9fdededd413a5a34e42bfc9673fb7988
- Verdict
- Inconclusive
- File type
- PowerShell · 3.3 KB
Cite this report: https://app.malva.re/sha256/cd8aeb8d084d1a658bf0f4c10af8960f04af3fea3932097d60c50b912e5e7499
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
3.34 KB · 3,339 B
First seen
2026-10-21 16:00 · 8 days ago
Last seen
2026-10-21 16:00 · 8 days ago
Last analysis
2026-10-21 16:00 · 8 days ago
Hashes
MD5
9fdededd413a5a34e42bfc9673fb7988
Sha1
5ddd9c624d3b1809729f572039562970c99262ad
Sha256
cd8aeb8d084d1a658bf0f4c10af8960f04af3fea3932097d60c50b912e5e7499
Sha384
4852672bbf39b7063a757daee91274326ff8fe96df30d496700eff77abc018b186fcf5f9bf7204a2225348f3c6a21324
Sha512
f962d975c21ab83591419c88281859315b15e2ccc83e29373c6796fada64ad39c0693a74fe522070b5d83cc5e81ce0ee8d0df0c93ec1df4623f281ed3dbcbf83
SSDeep
48:qaqiM1F8IVHXdeM//SXJWAA1GGeps7bA9T6KU:q1V1F8IV3d7/CYTlwsPALU
TLSH
43618B8CAC82F06842B3F33DD79B9409FB665967450991107CDCA2A06FB142886EDFED
1 file
PS19fdededd413a5a34e42bfc9673fb7988
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1
Shape
scr:ps1
1 nodes