Suspect
PowerShell
MD5: dc0858a283f53a7a8acf423553fdf24a
Size: 235.52 KB
application/x-powershell
This sample is a 230 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- b26bf6ba1b6a75a236e94a74b30c804df628fa4662bbbe8962c955d3c5502e94
- MD5
- dc0858a283f53a7a8acf423553fdf24a
- Verdict
- Inconclusive
- File type
- PowerShell · 230 KB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/b26bf6ba1b6a75a236e94a74b30c804df628fa4662bbbe8962c955d3c5502e94
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
235.52 KB · 235,519 B
First seen
2026-09-04 08:15 · one month ago
Last seen
2026-09-04 08:15 · one month ago
Last analysis
2026-09-04 08:15 · one month ago
Hashes
MD5
dc0858a283f53a7a8acf423553fdf24a
Sha1
67938703dbd15cf498798ce3fa9e3839704b9853
Sha256
b26bf6ba1b6a75a236e94a74b30c804df628fa4662bbbe8962c955d3c5502e94
Sha384
ef9d75a74c29fa0c42130e1c06fbb91d11d6b0781fa8bba45ac2c48b012f2b4e5c72f7ff4603b1c1873e673b097ff99d
Sha512
e015126ce519c80328672e515a50ec8624078f008d453c3dea0088ebcfb75079db4c47642906d55edc65c900450eb9eff64ea5f0e242d16de6954ece95320b8a
SSDeep
6144:R+s1HYuyNtgCKlTi+5FD5HZYNX0L1LygQ4lMRupdyqTbNWsJNtgYsscXwnu:TqB2bHLL11+8yq/cL
TLSH
0B3442972305EAB8F2CD1BA6AD0B0559A1F8D815F88F5148F7BA7DC7375AE801834EC1
1 file
PS1dc0858a283f53a7a8acf423553fdf24aT1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1059.001
Shape
scr:ps1
technique1 nodes