Suspect
PowerShell
MD5: ac4853679479143ee43a4d9a295c70f4
Size: 9.17 MB
application/x-powershell
This sample is a 8.7 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 3178411da3808707a3b51cfbfe9e7de63f660ca231bfec8a54614627baee5bf7
- MD5
- ac4853679479143ee43a4d9a295c70f4
- Verdict
- Inconclusive
- File type
- PowerShell · 8.7 MB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/3178411da3808707a3b51cfbfe9e7de63f660ca231bfec8a54614627baee5bf7
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
9.17 MB · 9,167,999 B
First seen
2026-10-04 07:00 · 25 days ago
Last seen
2026-10-04 07:00 · 25 days ago
Last analysis
2026-10-04 07:00 · 25 days ago
Hashes
MD5
ac4853679479143ee43a4d9a295c70f4
Sha1
e0fec6dbfa82e3624f69692aa4e3b9f98780ab9a
Sha256
3178411da3808707a3b51cfbfe9e7de63f660ca231bfec8a54614627baee5bf7
Sha384
3baa18069b7930326695e3d5136f1d60d28b9bcee302a62b48ab719681ffe78dfa8be7e69874ff365141d6ca91191030
Sha512
4af295b12c46abe049fee8a32a72bc85b98c97dbc8fe46696df7f4bc5fe987e9362c680366d51b5cf0493b10b9448c2bca94a3877a5cd39895ced1defc5b2109
SSDeep
24576:EH7OabTVF1FGpJRq6GrgLcwha7N6Rquxwl+9/s/9RHNTfp2gabVB50rdkVw2VliE:t
TLSH
CB96ADCF66A60A82DE1ECE5CF4D04C2C459B613E9794218930748FD63BE71C86DDB62B
1 file
PS1ac4853679479143ee43a4d9a295c70f4T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes