Suspect
JavaScript
MD5: 017f47815040b9fce4c7b0deda529da8
Size: 478.21 KB
application/javascript
This sample is a 467 KB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 4982f613dd5b56f4403a73b693ef6f0198ed98bc05aaf98972b11898751676bc
- MD5
- 017f47815040b9fce4c7b0deda529da8
- Verdict
- Inconclusive
- File type
- JavaScript · 467 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/4982f613dd5b56f4403a73b693ef6f0198ed98bc05aaf98972b11898751676bc
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript (reclassé : grammaire non-VBScript)
Size
478.21 KB · 478,208 B
First seen
2026-10-11 15:45 · 22 days ago
Last seen
2026-10-11 15:45 · 22 days ago
Last analysis
2026-10-11 15:45 · 22 days ago
Hashes
MD5
017f47815040b9fce4c7b0deda529da8
Sha1
3d4902dce3daf891c74e110133e9fe209837d44a
Sha256
4982f613dd5b56f4403a73b693ef6f0198ed98bc05aaf98972b11898751676bc
Sha384
9d9cb2430febc1fed2c9c1dbd5f60554bf9deed307f77733b8263e1e0e4ea9d9a9189deb8f1e9a03d89659d7b2e4cd7d
Sha512
772779604e22d4576cdda2a1c6c3bb8161689132afc390e4a16dfcc963ad5044a781e93b2a3d1bea2481241f2d7228391b8b40c767605718514980bba1638c72
SSDeep
6144:KAPRUwKzdXMl92pOAPbxTAszwUeSWf3dLmmY0nDWdyKimdYDPJHT04nnBwtTTfAd:KA4RXM+OA98SWYmY0nDWMK0
TLSH
C1A429427BE4DDE6DC226138958B63189736FCB0179296DB57200222AE07BEC9D3FF15
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
3 files
JS017f47815040b9fce4c7b0deda529da8T1059.007
Structure
BINOverlay_8b9e3b1f.bin
BIN(folder)
BINResources
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1059.007>pe:rsrc>bin
Shape
pe:exe>pe:rsrc>bin
technique3 nodes
Path
pe:exe~T1059.007>bin
Shape
pe:exe>bin
technique2 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_8b9e3b1f.bin (99328 bytes) |