MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d
SHA3-384 hash:	8131d0dc16544c9ae12163943bef7b86c12fbf5ffa286a2f2ea0ef76e25f90b27f2b7ed85cb9c2e22aef5a8b786ff2fd
SHA1 hash:	35f40aebb4ed7bd59529ceeba202f759d482997c
MD5 hash:	76d1df69cc808b124ddff67e3cecf955
humanhash:	alaska-robert-low-bulldog
File name:	ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d.ps1
Download:	download sample
File size:	536 bytes
First seen:	2026-04-23 09:58:59 UTC
Last seen:	Never
File type:	ps1
MIME type:	text/plain
ssdeep	12:2gDlDzBNKzdN8Q5NmfH0QwhGyCycwhGrPW:2gDl3KhRrmfUHh1CahkPW
TLSH	T18EF02BB75841002794CFC1AFEA31A005B261FAEECA063D0EBED9FD3435451B1B162D14
Magika	powershell
Reporter	JAMESWT_WT
Tags:	169-254-169-254 ps1

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

121

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69c7d5a6e137efff54f4f9ec

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

obfuscated soft-404

Link:

https://www.filescan.io/uploads/69e9ed8a8a82359247ae12bd/reports/92d1c5b8-4d0d-4f93-8f2f-8de269185abe/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

ps1

Link:

https://opentip.kaspersky.com/ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d/results?tab=lookup

Nucleon Malprob Susipicious

Score:

46%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d/

Neiki Malicious

Verdict:

Malicious

Link:

https://tip.neiki.dev/file/ae282788da36b97fde6e1ea9a6492072e90145a81dbc7fa5ce3f90349bb25a3d

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-03-28 13:20:48 UTC

File Type:

Text (PowerShell)

AV detection:

4 of 24 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vyucpcg2g24x7xtod2u2msjaoluqcrnidw6h7jooh6idjg5sli6q._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  10/10

Tags:

execution

Link:

https://tria.ge/reports/260423-l1daeaay7m/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Command and Scripting Interpreter: PowerShell

Badlisted process makes network request

Malware Config

Dropper Extraction:

http://169.254.169.254/latest/meta-data/iam/security-credentials/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.