Malicious
PowerShell
MD5: f1382610aa28c3d496a99481719b1120
Size: 54.44 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
This sample is a 53.2 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 257 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 71131cc161bf19febc61f1174208529e9fc9de2a6fd2b60bcc78638657bd5692
- MD5
- f1382610aa28c3d496a99481719b1120
- Verdict
- Malicious
- File type
- PowerShell · 53.2 KB
Cite this report: https://app.malva.re/sha256/71131cc161bf19febc61f1174208529e9fc9de2a6fd2b60bcc78638657bd5692
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
54.44 KB · 54,436 B
First seen
2026-10-27 18:45 · 6 days ago
Last seen
2026-10-27 18:45 · 6 days ago
Last analysis
2026-10-27 18:45 · 6 days ago
Hashes
MD5
f1382610aa28c3d496a99481719b1120
Sha1
33d290dd7ca4b7839e35e9d0aaff8f03107d6ce0
Sha256
71131cc161bf19febc61f1174208529e9fc9de2a6fd2b60bcc78638657bd5692
Sha384
0fb9798a1fce2805bd907c1b4cd7b04364da870473d774b00c4054b536bc17a3a440af0f1d59f4eaac3f8b82ba2409be
Sha512
7b7fc194d70ff79e3f91b199373e05c3fdba9079ebbe58b25e26eb9d6bddbfcbc1567d54f2f7ea90308d6766a91122825a82227253930ae235b707e38cf66bb7
SSDeep
1536:8noTQ8eluK5RjjjQHCH8LQFgDaLROlhx5DKpiS:8t8pK5h4Ql4aLRO/vWiS
TLSH
7C33F249AF8A0F59D244749C79A33B1C2D80B794D228CD99BFF740AE696C7C61937109
2 malicious · 3 files
PS1f1382610aa28c3d496a99481719b1120T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059.001
Shape
scr:ps1
malicious
1 nodes