Malicious
Malicious

cdfbcab3a82bacdda09687b7176a28ed

PowerShell
MD5: cdfbcab3a82bacdda09687b7176a28ed
Size: 94.51 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

This sample is a 92.3 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 8 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
c0d6907ef568776b9910c9426b03b4ae38882165379f68eb3fb13020570c0169
MD5
cdfbcab3a82bacdda09687b7176a28ed
Verdict
Malicious
File type
PowerShell · 92.3 KB
MITRE ATT&CK
T1027T1059.001

Cite this report: https://app.malva.re/sha256/c0d6907ef568776b9910c9426b03b4ae38882165379f68eb3fb13020570c0169

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
94.51 KB · 94,512 B
First seen
2026-10-27 06:45 · an hour ago
Last seen
2026-10-27 06:45 · an hour ago
Last analysis
2026-10-27 06:50 · an hour ago
Hashes
MD5 cdfbcab3a82bacdda09687b7176a28ed Sha1 7f761cad2b5c4b650badfb5a42742aafd0f188f8 Sha256 c0d6907ef568776b9910c9426b03b4ae38882165379f68eb3fb13020570c0169 Sha384 dafb5577c9385d311ab7c3c44ef836baf9fed3fca7b3a68c5b5a50f3664f9fcbc7236c4f2cdfdc276ab690c44f0ca031 Sha512 0f8414a53656dc027152eaf5095d2a5d075be3360ae53801ce3f7656b3774b266c779538c65004fc9697b845cc6b66bc0aea56d834dbe2517896d9e00588274a SSDeep 1536:JlsaBRceNjHcWQikfbwhjmZZuGfqAxBTMp2uvepviVx:JXBRceJHcqkfnZ1fqYdMp2uvQax TLSH 7D933AB0F9144525BE4B939FEE506995F078A316012312A0FECF1FCD5C2666DA3BD28B

4 malicious · 4 files
PS1cdfbcab3a82bacdda09687b7176a28ed
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059.001
Shape scr:ps1
malicious 1 nodes

4 malicious · 4 files
PS1cdfbcab3a82bacdda09687b7176a28ed
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙