Malicious
PowerShell
MD5: a2952128484cd5a8b781b15c5f6a04a9
Size: 160.61 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 156.8 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 5 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 4990213133c26f6a0652e72e819dbadf0b02d217684004b81d9e27242179412a
- MD5
- a2952128484cd5a8b781b15c5f6a04a9
- Verdict
- Malicious
- File type
- PowerShell · 156.8 KB
Cite this report: https://app.malva.re/sha256/4990213133c26f6a0652e72e819dbadf0b02d217684004b81d9e27242179412a
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
160.61 KB · 160,610 B
First seen
2026-10-26 15:30 · 8 hours ago
Last seen
2026-10-26 15:30 · 8 hours ago
Last analysis
2026-10-26 15:30 · 8 hours ago
Hashes
MD5
a2952128484cd5a8b781b15c5f6a04a9
Sha1
aa230ed5d9ae8d3cfc94ecf2e039590754073de5
Sha256
4990213133c26f6a0652e72e819dbadf0b02d217684004b81d9e27242179412a
Sha384
baaddff1f3c8de5b0ca1a66cd16c49eb213098b8434e88cd98366b39eadfd646b005c4ff01648f8fc1b0b66c22bd08e2
Sha512
5991666c64b9fcf320874911b566a222e50bd20ad1ada88425cf9114e83b6708948a474e564967c3b2bd4811473a2555e7b2a19161690e1fe49032eb5ab32788
SSDeep
384:95upw+KV8BgmV0P4/3JI6yXghUxqykx7xN/42kmw+kDh1FgLluzMx2CWUBzi57vY:z8HDxmDLwuzM9B47iYhIiRhK6xjtAV
TLSH
C2F3843F473F5791E0AF6B4189AA8325A30390D2D5386F49468D83A98FB7C117C54BBB
3 malicious · 3 files
PS1a2952128484cd5a8b781b15c5f6a04a9T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes