Open-source atomic malware analysis

Analyze another

PowerShell/DSC v3.2.2

UNKNOWN
Verdict: BENIGN
“This repo is for the DSC v3 project”

Referenced by 1 sample

Objectives

suspicious severity, 96% confident.
privilege-escalation/elevation-control/uac-bypass Per-user Environment registry key
suspicious severity, 82% confident.
supply-chain/hidden-payload Cargo depends on ntapi
notable severity, 94% confident.
command-and-control/dropper/delivery Selects a payload by host architecture

Micro-behaviors

notable severity, 92% confident.
communications/http/services AWS Lambda function-list operation
notable severity, 94% confident.
crypto/symmetric/aes AES-256-CTR cipher marker
notable severity, 92% confident.
data Generated output execution verb
notable severity, 92% confident.
fs/file/write PowerShell writes file with Set-Content
notable severity, 92% confident.
os/module Resolves a Windows API export in source
notable severity, 98% confident.
os/package-manager Uses an APT package install command
notable severity, 99% confident.
os/service References a stopped or disabled service message
notable severity, 96% confident.
process/create PowerShell suppresses startup banner

Metadata

notable severity, 95% confident.
package/testing/harness Rust test framework

20 of 62 traits shown

Identity

SHA-256 9bbcd58501ceaafa6e011919ac5a97bfd747c71cc9630d67df453a02ca7c0c87
Canonical SHA-256 024b8cc85e6731943c9b1796bda92610854d79fe7fdec7702729b66c15b9b029
Filename v3.2.2
Package powershell/dsc
Version v3.2.2
PURL pkg:github/powershell/[email protected]

Origin

Source upload
Ecosystem github
Domain github.com
URL https://codeload.github.com/powershell/dsc/tar.gz/v3.2.2

Timeline

First seen 2 Aug 2026 10:50 UTC
First analyzed 2 Aug 2026 10:52 UTC
Last analyzed 2 Aug 2026 10:52 UTC
Last updated 2 Aug 2026 10:50 UTC

Labeling

Label unknown
Label source upload
Traits version 59b94