Suspicious
Suspect

bb4f623e76a412e2a10b1c83987df08a

PowerShell
MD5: bb4f623e76a412e2a10b1c83987df08a
Size: 1.51 MB
application/x-powershell

This sample is a 1.4 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
65f7b9d663b9adc3ad6d0dc4d72f4dafd9c04b837a3e255f9a435dcc3512598f
MD5
bb4f623e76a412e2a10b1c83987df08a
Verdict
Inconclusive
File type
PowerShell · 1.4 MB
MITRE ATT&CK
T1059.001

Cite this report: https://app.malva.re/sha256/65f7b9d663b9adc3ad6d0dc4d72f4dafd9c04b837a3e255f9a435dcc3512598f

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
1.51 MB · 1,506,437 B
First seen
2026-10-29 12:15 · 14 hours ago
Last seen
2026-10-29 12:15 · 14 hours ago
Last analysis
2026-10-29 15:33 · 11 hours ago
Hashes
MD5 bb4f623e76a412e2a10b1c83987df08a Sha1 f4fc1147414c1add7b6fbb6dcedf0b35fe6e1161 Sha256 65f7b9d663b9adc3ad6d0dc4d72f4dafd9c04b837a3e255f9a435dcc3512598f Sha384 a0ea3113222cb494a4ba8e5ad6f1b25d00d802f9d8591d2df2fec6c606ba42cd80a18535158d3ee5d3e587d7c08177ca Sha512 c6ebc1aab2fcb354f8372708fb2a31cb1543b1f00b762c99e41e2856f221f3631e9ffd3904c276fa7a93c65affc4d0b07272b9d0cc4ab63c7b99cde75ccadbce SSDeep 24576:77EACERloZ9VjJ/wpipduxbRncTJZ1/GYw9GgHiOh/Cqzcxbsx:UKT0wlcMYw9H5Vgsx TLSH E765237D5D8A52DF0811E2BEB145B858B2E82386094162A743FC457072F6630FEBFDE6

1 file
PS1bb4f623e76a412e2a10b1c83987df08a
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1059.001
Shape scr:ps1
technique1 nodes

1 file
PS1bb4f623e76a412e2a10b1c83987df08a
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙