Suspicious
Suspect

017f47815040b9fce4c7b0deda529da8

JavaScript
MD5: 017f47815040b9fce4c7b0deda529da8
Size: 478.21 KB
application/javascript

This sample is a 467 KB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
4982f613dd5b56f4403a73b693ef6f0198ed98bc05aaf98972b11898751676bc
MD5
017f47815040b9fce4c7b0deda529da8
Verdict
Inconclusive
File type
JavaScript · 467 KB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/4982f613dd5b56f4403a73b693ef6f0198ed98bc05aaf98972b11898751676bc

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript (reclassé : grammaire non-VBScript)
Size
478.21 KB · 478,208 B
First seen
2026-10-11 15:45 · 22 days ago
Last seen
2026-10-11 15:45 · 22 days ago
Last analysis
2026-10-11 15:45 · 22 days ago
Hashes
MD5 017f47815040b9fce4c7b0deda529da8 Sha1 3d4902dce3daf891c74e110133e9fe209837d44a Sha256 4982f613dd5b56f4403a73b693ef6f0198ed98bc05aaf98972b11898751676bc Sha384 9d9cb2430febc1fed2c9c1dbd5f60554bf9deed307f77733b8263e1e0e4ea9d9a9189deb8f1e9a03d89659d7b2e4cd7d Sha512 772779604e22d4576cdda2a1c6c3bb8161689132afc390e4a16dfcc963ad5044a781e93b2a3d1bea2481241f2d7228391b8b40c767605718514980bba1638c72 SSDeep 6144:KAPRUwKzdXMl92pOAPbxTAszwUeSWf3dLmmY0nDWdyKimdYDPJHT04nnBwtTTfAd:KA4RXM+OA98SWYmY0nDWMK0 TLSH C1A429427BE4DDE6DC226138958B63189736FCB0179296DB57200222AE07BEC9D3FF15
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL

3 files
JS017f47815040b9fce4c7b0deda529da8
Structure
BINOverlay_8b9e3b1f.bin
BIN(folder)
BIN4
BIN18
BIN30
BIN42
BIN53
BIN67
BINResources
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe~T1059.007>pe:rsrc>bin
Shape pe:exe>pe:rsrc>bin
technique3 nodes
Path pe:exe~T1059.007>bin
Shape pe:exe>bin
technique2 nodes

Name Value
Info
Overlay extracted: Overlay_8b9e3b1f.bin (99328 bytes)

3 files
JS017f47815040b9fce4c7b0deda529da8
Structure
BINOverlay_8b9e3b1f.bin
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙