Sign up free
Malicious
Malicious

028cc7a064085260abff95ca9a35d870

Share on LinkedIn
Print
JavaScript
MD5: 028cc7a064085260abff95ca9a35d870
Size: 2.68 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 2.6 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 2 embedded or derived files. It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
788c8bd7e0c7d173b3e1766b8688f6bbf24d86329af4eaea8709688c59fb8e74
MD5
028cc7a064085260abff95ca9a35d870
Verdict
Malicious
File type
JavaScript · 2.6 MB

Cite this report: https://app.malva.re/sha256/788c8bd7e0c7d173b3e1766b8688f6bbf24d86329af4eaea8709688c59fb8e74

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
2.68 MB · 2,675,109 B
First seen
2026-11-02 13:45 · 6 hours ago
Last seen
2026-11-02 13:45 · 6 hours ago
Last analysis
2026-11-02 13:46 · 6 hours ago
Hashes
MD5 028cc7a064085260abff95ca9a35d870 Sha1 a27f0a5b22edcbd453749f2b817c8011a214d5fd Sha256 788c8bd7e0c7d173b3e1766b8688f6bbf24d86329af4eaea8709688c59fb8e74 Sha384 0a04261230c1327906fd4ca1c67363116b370d52c30c5271c391d4c3479bd078758b5873a282214e98de36cf0a87417e Sha512 2dcf484c28087cb5e7b53ed0511dd9454ccaa33b28c132daf4d3ea133a28546bb45abdcfae41c48cc3c022fa51efd982d78dfc0d2a3f0a188ea67b925f0d6e86 SSDeep 24576:5phOwDiceeYTbxQ0Y3C1hFMKd56UaL3XisZkMEdDTOgND1/rljdRCZsZH3cpkkuU:5jdD/yJzsD8ZPRCRpfHkJwAfafXrV TLSH E8C51257DA15AFCF843D154EC6820C902C93AB76F3A8C1D53BCF856E935AE0A1D2879C

3 malicious · 3 files
JS028cc7a064085260abff95ca9a35d870
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:ps1~T1027~T1059.001
Shape scr:js>scr:ps1
malicious 2 nodes

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙