Suspicious
Suspect

dde2ee997d291e26339cae4cb5e09472

PowerShell
MD5: dde2ee997d291e26339cae4cb5e09472
Size: 1.5 MB
application/x-powershell

This sample is a 1.4 MB PowerShell. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
0f4bdea083137db9fb14b677d019c8dc6c87f40ab76e46512afbe05bd6a4f76b
MD5
dde2ee997d291e26339cae4cb5e09472
Verdict
No known threat found
File type
PowerShell · 1.4 MB
MITRE ATT&CK
T1059.001

Cite this report: https://app.malva.re/sha256/0f4bdea083137db9fb14b677d019c8dc6c87f40ab76e46512afbe05bd6a4f76b

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
1.5 MB · 1,500,813 B
Hashes
MD5 dde2ee997d291e26339cae4cb5e09472 Sha1 55f8234c01001731bdc67773f06d149216c17b5b Sha256 0f4bdea083137db9fb14b677d019c8dc6c87f40ab76e46512afbe05bd6a4f76b Sha384 4760f81e20571ad35ddeb9acf918cb6dc89ee55f12dd21210dfc41a1e7b12e3dd7a15b43cf78b4041c9779e2807e8a8d Sha512 292403aff2150380815e1c3dcba65b1f2b22b8942086c22ff03e98bfdb8621cf3351b75faece510d2ddc9181813714698078c89722128ea026e47b901b869db5 SSDeep 24576:CuC3cD3blA+ME22tsUAF1mvWaeHDxevyp0gjPGI8JTsyKiU90EmVc91P:vtJA+0Xovlej7hy7Zy TLSH 14652364451E12CF0401A2FAB483E405B0CEABC759865B2653D9C7D83AFC2F5DF7BA62

1 file
PS1dde2ee997d291e26339cae4cb5e09472
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1059.001
Shape scr:ps1
technique1 nodes

1 file
PS1dde2ee997d291e26339cae4cb5e09472
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙