Malicious
PowerShell
MD5: cdfbcab3a82bacdda09687b7176a28ed
Size: 94.51 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 92.3 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 8 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c0d6907ef568776b9910c9426b03b4ae38882165379f68eb3fb13020570c0169
- MD5
- cdfbcab3a82bacdda09687b7176a28ed
- Verdict
- Malicious
- File type
- PowerShell · 92.3 KB
Cite this report: https://app.malva.re/sha256/c0d6907ef568776b9910c9426b03b4ae38882165379f68eb3fb13020570c0169
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
94.51 KB · 94,512 B
Hashes
MD5
cdfbcab3a82bacdda09687b7176a28ed
Sha1
7f761cad2b5c4b650badfb5a42742aafd0f188f8
Sha256
c0d6907ef568776b9910c9426b03b4ae38882165379f68eb3fb13020570c0169
Sha384
dafb5577c9385d311ab7c3c44ef836baf9fed3fca7b3a68c5b5a50f3664f9fcbc7236c4f2cdfdc276ab690c44f0ca031
Sha512
0f8414a53656dc027152eaf5095d2a5d075be3360ae53801ce3f7656b3774b266c779538c65004fc9697b845cc6b66bc0aea56d834dbe2517896d9e00588274a
SSDeep
1536:JlsaBRceNjHcWQikfbwhjmZZuGfqAxBTMp2uvepviVx:JXBRceJHcqkfnZ1fqYdMp2uvQax
TLSH
7D933AB0F9144525BE4B939FEE506995F078A316012312A0FECF1FCD5C2666DA3BD28B
4 malicious · 4 files
PS1cdfbcab3a82bacdda09687b7176a28edT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes