MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f
SHA3-384 hash:	77492c14c80bb5708b2efcb36b5198e7c0f7afc2c25396c089cc09a2bdb59f436c82bdb59167e9b2cf8b82b21860ea1c
SHA1 hash:	88fbc5e9f5f478d61ae28de608c92833dc27f84f
MD5 hash:	a9cab969497a66aa495f905356d64b10
humanhash:	alanine-mike-pennsylvania-mockingbird
File name:	2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f.ps1
Download:	download sample
File size:	585 bytes
First seen:	2026-05-14 08:49:54 UTC
Last seen:	Never
File type:	ps1
MIME type:	text/plain
ssdeep	12:RpJz2y2sPyxkBw/CQOb5XIx+X/EY1Mtn3/tiZkre0SoqH8X9G+T9:/5cXxZHqYxG/EHR1iZ7I9Gq9
TLSH	T187F081D30B95E1336D702F37587BA907A3C510239E5672D27E606885C7F061AA713507
Magika	powershell
Reporter	JAMESWT_WT
Tags:	104-207-135-174 155-138-247-221 ps1

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

111

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.PwrSh.Nukesped-B.34779551.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a058ce3953bbcef1c903928

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

nukesped

Link:

https://www.filescan.io/uploads/6a058cdffd9cdd6841708950/reports/19a3e092-fccf-4d14-8a10-57c7106e7bdd/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

ps1

First seen:

2026-04-29T08:20:00Z UTC

Last seen:

2026-04-29T08:57:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f/results?tab=lookup

Nucleon Malprob Malware

Score:

85%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f/

Neiki Susipicious

Verdict:

Susipicious

Link:

https://tip.neiki.dev/file/2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f

ReversingLabs TitaniumCloud Script-PowerShell.Trojan.Nukesped

Threat name:

Script-PowerShell.Trojan.Nukesped

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-04-30 08:35:12 UTC

File Type:

Text (PowerShell)

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fra5j6he4ribgh3lfboitysauhwrfdtynv7rdjfcvv3y5zgbfrxq._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/2c41d4f8e4e450131f6b285c89e240a1ed128e786d7f11a4a2ad778ee4c12c6f