Malicious
Malicious

0a975dca2a353d5d308726c015d416d8

Share on LinkedIn
Print
JavaScript
MD5: 0a975dca2a353d5d308726c015d416d8
Size: 2.48 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 2.4 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
4dcfd3d9646adabd5f4a444deea0085ddf86ae0c401e72e283352890b5329c83
MD5
0a975dca2a353d5d308726c015d416d8
Verdict
Malicious
File type
JavaScript · 2.4 MB

Cite this report: https://app.malva.re/sha256/4dcfd3d9646adabd5f4a444deea0085ddf86ae0c401e72e283352890b5329c83

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
2.48 MB · 2,475,878 B
First seen
2026-10-30 07:31 · 2 hours ago
Last seen
2026-10-30 07:31 · 2 hours ago
Last analysis
2026-10-30 07:31 · 2 hours ago
Hashes
MD5 0a975dca2a353d5d308726c015d416d8 Sha1 e2312f4579e9b58421c79fdea098a767f4a88629 Sha256 4dcfd3d9646adabd5f4a444deea0085ddf86ae0c401e72e283352890b5329c83 Sha384 894e74fa3fca1e785309fdced24253340ffdf7c50cde9e728c7ba2a3e6122988c1c145102ebb4539c6aa990f62e252b0 Sha512 a227c5bbbd4fac943013faaa8c304168b92a8e9ecfb283f8a9f66c565c0e5647c7213e75400308a6a822946c0d4148b28be0eb85692febfd80119f6360a6238c SSDeep 49152:e0sD5tOOe3F/bv8kND4zZKxPhR/DfTDGujF4JLWFGe74s3G3e904O7aEpMV2Mrv+:jsD5tOOe3F/bv8kND4VKxPhR/DfvGujS TLSH 29B5C5344218FB71B56DC62CC667AB040AEA7F0F62F4BE3D76F8358563A2716354E062

4 malicious · 4 files
JS0a975dca2a353d5d308726c015d416d8
BIN0a975dca2a353d5d308726c015d416d8.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\ARMDQhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙