Malicious
PowerShell
MD5: c08c3dab9f5dd4fcb6afe1e18a0456fc
Size: 244.57 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 238.8 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 258 embedded or derived files. It matches 10 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 4df08a2aa4af3da79fa7fa6bba295b8c82e7d1d85887e1e7116cfd9b376c0fb0
- MD5
- c08c3dab9f5dd4fcb6afe1e18a0456fc
- Verdict
- Malicious
- File type
- PowerShell · 238.8 KB
Cite this report: https://app.malva.re/sha256/4df08a2aa4af3da79fa7fa6bba295b8c82e7d1d85887e1e7116cfd9b376c0fb0
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
244.57 KB · 244,572 B
First seen
2026-11-04 11:00 · an hour ago
Last seen
2026-11-04 11:00 · an hour ago
Last analysis
2026-11-04 11:01 · an hour ago
Hashes
MD5
c08c3dab9f5dd4fcb6afe1e18a0456fc
Sha1
7429e7cd7fe0bee76fc1a148097816af3a8e7911
Sha256
4df08a2aa4af3da79fa7fa6bba295b8c82e7d1d85887e1e7116cfd9b376c0fb0
Sha384
d8655f4138e35573ea6a8ec86cf78fed3fc23b2e575e1c743a1ec260dd2e415de570fd373b0e80f55618fed1d6c9e65d
Sha512
77686aa59992eb3cfb3704132d78a253fe6441e356843acdcef9eeaee9f7a846c10f64b15652eef0d1428be3a8ebefb07a310473f6a00368727a292a959dcf64
SSDeep
6144:xVrmA0kjj7ylqZobjei66iwA3MTlJgYwzVfE01CE:vmA/f7MxFHTa2E
TLSH
733413033D9668C6051C9198338E0E09D5AE066E1D5A865237FCF5895FE6338AF4BCFB
3 malicious · 4 files
PS1c08c3dab9f5dd4fcb6afe1e18a0456fcT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes