Suspicious
Suspect

f2c372505d224d1a4060cda008adaa31

Share on LinkedIn
Print
PowerShell
MD5: f2c372505d224d1a4060cda008adaa31
Size: 7.5 KB
application/x-powershell

This sample is a 7.3 KB PowerShell for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.001. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
c2643e4cf25dfdf67f63e79c098b597659e320dbf986a71aa500d6df71858b27
MD5
f2c372505d224d1a4060cda008adaa31
Verdict
Inconclusive
File type
PowerShell · 7.3 KB
MITRE ATT&CK
T1059.001

Cite this report: https://app.malva.re/sha256/c2643e4cf25dfdf67f63e79c098b597659e320dbf986a71aa500d6df71858b27

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
PowerShell Script
Size
7.5 KB · 7,502 B
First seen
2026-10-15 07:15 · 16 days ago
Last seen
2026-10-15 07:15 · 16 days ago
Last analysis
2026-10-15 07:15 · 16 days ago
Hashes
MD5 f2c372505d224d1a4060cda008adaa31 Sha1 7d2e222bbb682dfb982ce1aec32eead8eb0ce79e Sha256 c2643e4cf25dfdf67f63e79c098b597659e320dbf986a71aa500d6df71858b27 Sha384 147d2f4701862d536143c5c3c38b58087e9fa210bc83147de3dc8575b9b1b96bccee76bbde11cab393c313311345c95b Sha512 fdd869d06009504d23e028414fac438e0da77799d0e3fa4aee76d04a8c6116186fa9602382f52bb55ab5cd803478539d44130e6c3b7e16e55735c9590d94164d SSDeep 192:yO/R/DIGz2eH6XNCCLwqYekDMu0uD4pkFY+OLassSJIdZrI:nRb3zP0sCcakDMu3I TLSH F2F1E61AA97E527D00C70F77C4D00B00962B831E91D225283FA9DBEA6D691CFD76E287

2 files
PS1f2c372505d224d1a4060cda008adaa31
BIN[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1059.001
Shape scr:ps1
technique1 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙