Suspicious
Suspect

dcbaa5fc9c0624aed24b86ec366bcedf

PowerShell
MD5: dcbaa5fc9c0624aed24b86ec366bcedf
Size: 1.55 MB
application/x-powershell

This sample is a 1.5 MB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
74d82db8de883724b21017ad054b8563eca5dd2488f303d9f8a531051ec8fa5e
MD5
dcbaa5fc9c0624aed24b86ec366bcedf
Verdict
Inconclusive
File type
PowerShell · 1.5 MB
MITRE ATT&CK
T1059.001

Cite this report: https://app.malva.re/sha256/74d82db8de883724b21017ad054b8563eca5dd2488f303d9f8a531051ec8fa5e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
1.55 MB · 1,552,074 B
First seen
2026-10-12 18:30 · 18 days ago
Last seen
2026-10-12 18:30 · 18 days ago
Last analysis
2026-10-12 18:30 · 18 days ago
Hashes
MD5 dcbaa5fc9c0624aed24b86ec366bcedf Sha1 36dc328d2b4c393737a995c2c1566829e0e9e2da Sha256 74d82db8de883724b21017ad054b8563eca5dd2488f303d9f8a531051ec8fa5e Sha384 754a7b7bd4bcf1272606c494485847534043827963baf8134bdb34d771b2f528ddd17c1bb83c3a000e7b03d85f5b4477 Sha512 fec9c9a0cce86f0d7102e8a8e5a2368049a86b356f2bb52a33ad471c8b76034b0113a5cc1acafdc50bedabf760f0f3b29ff48729d08cfb02d20441bb703ab8e6 SSDeep 24576:hTKRa+ruCmSKlgE1xZ5MFht2kzSoVkBZa7m6cZRn9/+bZbYwDQFQkP2DjkKy9Zvj:BsaWuQEn8kBySR9kMbFGIvXT TLSH 3D75236DE9DA33DF0911D0B9662BB88074DC33CB6D53062211BCC6A537E9865CEB7C85

1 file
PS1dcbaa5fc9c0624aed24b86ec366bcedf
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1059.001
Shape scr:ps1
technique1 nodes

1 file
PS1dcbaa5fc9c0624aed24b86ec366bcedf
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙