OneDriveUpdate.ps1
Classification: Malicious
OneDriveUpdate.ps1 is a malicious file sample. Linked to Empire malware. Reported by 2 threat sources, last seen 2026-03-10.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: EMPIRE (S0363)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-03-10 17:00:51 | 2026-03-10 17:00:51 | ||
| PowershellEmpire | MalwareBazaar Abuse.ch | 2025-12-01 09:12:15 | 2025-12-01 09:12:15 | malicious-activity | S0363 Empire |
Sample information
- Filenames
- OneDriveUpdate.ps1
- File type
- ps1
- MD5
0988c5dd1fc8f63bdf84c4107a5c9a9a- SHA-1
197bb89d270e29860f61fc39f621170831c94ff9- SHA-256
785d8f70dea1a2cac7b63c00583c3f9fe6faa298a304eb2104a9cc0a73ce2e74- First indexed
- 2025-12-01 09:12:15
- Last updated
- 2025-12-01 09:12:15