CLEAN — da1f77dfa870df9188aaa73ebc9629863d2a8b17d8ad78a39e31a0fb92cd0228.bin

CLEAN — da1f77dfa870df9188aaa73ebc9629863d2a8b17d8ad78a39e31a0fb92cd0228.bin is a unknown sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (32/100). 2 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: da1f77dfa870df9188aaa73ebc9629863d2a8b17d8ad78a39e31a0fb92cd0228
• SHA-1: fb2b66eac191c1dca18a0cf07951b7e5a5595a8e
• MD5: 5d0300799505338afdf2a5264ae98503
• ssdeep: 3072:G69AfKBsDuS3zscjs56B7BNIkn3mlw/5yP:G69AfKBsDuS3zscjs56B7BNIk3mg5yP
• TLSH: T1895B6E59088D6589BB035B3076B0D8652506D9393A3A69BB75E3C92EB5C3231FC1C2FC
• Submitted as: da1f77dfa870df9188aaa73ebc9629863d2a8b17d8ad78a39e31a0fb92cd0228.bin
• File type: unknown · Size: 2310910 bytes
• Verdict: clean (32/100)

Source: MalShare · first seen 2026-08-19T13:17:28.175Z · SHA-256 verified

Detections (2 of 53 engines)

• capa (capabilities): capability:execution/powershell
• Kaspersky (KVRT): HEUR:Trojan.Script.Generic

MITRE ATT&CK

• T1059.001

Why this verdict

The clean score of 32/100 is the fusion of 1 weighted signal:

• execute via PowerShell (rule execute via PowerShell) - capa signal, weight 0.40, confidence 0.80

Registry keys

• HKCU\Environment)

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report