This sample is a 1.4 MB PowerShell. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 0f4bdea083137db9fb14b677d019c8dc6c87f40ab76e46512afbe05bd6a4f76b
- MD5
- dde2ee997d291e26339cae4cb5e09472
- Verdict
- No known threat found
- File type
- PowerShell · 1.4 MB
- MITRE ATT&CK
- T1059.001
Cite this report: https://app.malva.re/sha256/0f4bdea083137db9fb14b677d019c8dc6c87f40ab76e46512afbe05bd6a4f76b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
scr:ps1~T1059.001
scr:ps1