MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4f4d546cc22645dac9153aad251f9a06577860edab84b3d29cc334f075ee3dc6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4f4d546cc22645dac9153aad251f9a06577860edab84b3d29cc334f075ee3dc6
SHA3-384 hash:	b13f67ac44480d1d537e74822614718e4343e478a47baa4833e0a75f558e65360d51bb220fa34025aba911027b6d3134
SHA1 hash:	741918bbfdba2519c8ee056c5f417b606a60546b
MD5 hash:	c4e53f5149b220114a6c938c5c5034b0
humanhash:	failed-victor-vermont-xray
File name:	mazkc.ps1
Download:	download sample
File size:	24'071'004 bytes
First seen:	2026-09-09 12:35:57 UTC
Last seen:	Never
File type:	ps1
MIME type:	text/plain
ssdeep	3072:jPGjMnzBbDVmBYNi9lNB3jm9kmpm94SwQSYlwEugwGi+mC211J9m9Pm9+mJaaRS5:0
TLSH	T10C37EF7DCEE8413EC2B7C929D9CA4A17F85A092B230CFD4A68D773A755271827CE211D
TrID	66.6% (.TXT) Text - UTF-16 (LE) encoded (2000/1) 33.3% (.MP3) MP3 audio (1000/1)
Magika	txt
Reporter	KodaDr
Tags:	ps1

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

85

Origin country :

RU

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ac90ea6b3f924fbb50ad91e

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

base64 evasive obfuscated packed reconnaissance

Link:

https://www.filescan.io/uploads/6aa152cde3ffb5bda32db545/reports/5fec89d0-1334-4e55-afb8-34ad37f41f84/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/4f4d546cc22645dac9153aad251f9a06577860edab84b3d29cc334f075ee3dc6

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

ps1

Link:

https://opentip.kaspersky.com/4f4d546cc22645dac9153aad251f9a06577860edab84b3d29cc334f075ee3dc6/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4f4d546cc22645dac9153aad251f9a06577860edab84b3d29cc334f075ee3dc6

Malva.RE Malware

Verdict:

Malware

YARA:

1 match(es)

Tags:

DeObfuscated PowerShell T1027 T1059.001

Link:

https://app.malva.re/file/c4e53f5149b220114a6c938c5c5034b0

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=j5gvi3gcezc5vsivhkwskh42azlxqyhnvoclhuu4ym2pa5pohxda._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

execution

Link:

https://tria.ge/reports/260909-ps2jtawbld/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of AdjustPrivilegeToken

Command and Scripting Interpreter: PowerShell

Suspicious use of NtSetInformationThreadHideFromDebugger

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4f4d546cc22645dac9153aad251f9a06577860edab84b3d29cc334f075ee3dc6