Suspect
be7d12970a6197e2d323ff18fc4e5a85
PowerShell
MD5: be7d12970a6197e2d323ff18fc4e5a85
Size: 549.99 KB
application/x-powershell
This sample is a 537.1 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- caff702bfd474f09f695e2e43deb006e14d2894ee62668fb036bbd619f588ac7
- MD5
- be7d12970a6197e2d323ff18fc4e5a85
- Verdict
- Inconclusive
- File type
- PowerShell · 537.1 KB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/caff702bfd474f09f695e2e43deb006e14d2894ee62668fb036bbd619f588ac7
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
549.99 KB · 549,993 B
Hashes
MD5
be7d12970a6197e2d323ff18fc4e5a85
Sha1
5ffdfa72255a96e42509f8782f6babdf1fe32a8b
Sha256
caff702bfd474f09f695e2e43deb006e14d2894ee62668fb036bbd619f588ac7
Sha384
2351c26d2bc21cb5c9901646222669882ce7a5908ac3a8f950582aeb087395a644f3b51c0958c45faf83ec021529e48c
Sha512
604c72d61d003828a68ef37b49a10a3ea318e2798874ab2872e58c8bb66a8bb6e83d68bd29855343ac2b5b98459cf7a3bf000cfe114ee60b090f651522671fe4
SSDeep
12288:lAKWFkSLPozLtQ3y9coKSbgNDD+WU6QSIMtA6niQ/x2jIj0cilyjfSyY1m7Ra/Ni:NJI
TLSH
16C4003A9F32FDD0033CB060E4991E9F3D411A93DBF42768EA6615570E78256DB2B29C
2 files
PS1be7d12970a6197e2d323ff18fc4e5a85T1059.001
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes
2 files
PS1be7d12970a6197e2d323ff18fc4e5a85T1059.001
BIN[Base64-Block]
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account