Malicious
PowerShell
MD5: e3edf47abbd374782ed75c37a9497c11
Size: 3.13 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 3.1 KB PowerShell classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 5 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- f0b1e30345be7dcff581dd70609c038e85f08c20c589149b85f9ba726a0ad837
- MD5
- e3edf47abbd374782ed75c37a9497c11
- Verdict
- Malicious
- File type
- PowerShell · 3.1 KB
Cite this report: https://app.malva.re/sha256/f0b1e30345be7dcff581dd70609c038e85f08c20c589149b85f9ba726a0ad837
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
3.13 KB · 3,131 B
First seen
2026-10-26 15:30 · 8 hours ago
Last seen
2026-10-26 15:30 · 8 hours ago
Last analysis
2026-10-26 15:30 · 8 hours ago
Hashes
MD5
e3edf47abbd374782ed75c37a9497c11
Sha1
5b459a45ad9c7b739e84858796c9f1185a41242b
Sha256
f0b1e30345be7dcff581dd70609c038e85f08c20c589149b85f9ba726a0ad837
Sha384
e46fec436ab41e7e794631c571780e6d95d46a86c3030733ab70d70add443948b1da83bf2c9248de92cbd4f0dfd04da8
Sha512
174ea028860b64ef7ab9dfdc7192a84cd7d4d33a70a5381f69953ea2214eb423cc92f83559fa482e0fe618807fcbcfbc6c587da21c72d30200d2942e34e74c42
SSDeep
96:FZk+7p6Yo4Sk/F2VjpEVW3tByh/8tq9/U/fMxADn:7gk/1/T/U/9n
TLSH
4E51424B3E02C13959B28DA4CEBEF829E9D0342B65455C04F61CCD47DF3266AB1301E9
3 malicious · 3 files
PS1e3edf47abbd374782ed75c37a9497c11T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes