Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

This sample is a 1.6 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
a70f4962a9cad7165bd195c6e5b8d9e02c76997da50869078ca0e7799257ac79
MD5
0037a379ed662236d95172a524ace258
Verdict
Malicious
File type
JavaScript · 1.6 MB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/a70f4962a9cad7165bd195c6e5b8d9e02c76997da50869078ca0e7799257ac79

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
1.71 MB · 1,707,488 B
First seen
2026-11-04 11:30 · an hour ago
Last seen
2026-11-04 11:30 · an hour ago
Last analysis
2026-11-04 11:30 · an hour ago
Hashes
MD5 0037a379ed662236d95172a524ace258 Sha1 51271cf4d44efc7fdfd971ba0bb847bc6c22ece9 Sha256 a70f4962a9cad7165bd195c6e5b8d9e02c76997da50869078ca0e7799257ac79 Sha384 169eecc0b7ad7c6762facd8a4f5c7392af9234fecdbc38d153b3d7e49970a4be62147f6be8e918615af297888afaf036 Sha512 b195311aab8a8aa0ad164aecf6b8f51cd7d3a6e542aa019f29c046e3d647d48048009af47f49a7d260dfeba6d7747a20a92c755c83608f4e29894270c18a70ad SSDeep 24576:x5yX86AfrXdb2gJbWiLex4jM5dhOBFdYeJO5xmqmq6sfuRJioQEvSG1/:zyXlwXFD1pk3aqmweJiopv9/ TLSH 2A85F1BD44841EF4CE6C5D0A41E90E19FF974A4B5E3BA68BDF22B8856AE3600D3071F5

1 malicious · 2 files
JS0037a379ed662236d95172a524ace258
EXE[Base64-Block @0x00040583]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>pe:exe
Shape scr:js>pe:exe
technique2 nodes

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 2 files
JS0037a379ed662236d95172a524ace258
EXE[Base64-Block @0x00040583]
No malware configuration was found at this point.

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
0037a379ed662236d95172a524ace258
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
0037a379ed662236d95172a524ace258 › [Base64-Block @0x00040583]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙