Malicious
Malicious

0d53cd59e54f0ed4ef9f4a884357fa07

JavaScript
MD5: 0d53cd59e54f0ed4ef9f4a884357fa07
Size: 10.34 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 9.9 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
74a102ef95093130da8449cf0cc070a0e57ee5d7b4b6bb449c88e144ebb8761c
MD5
0d53cd59e54f0ed4ef9f4a884357fa07
Verdict
Malicious
File type
JavaScript · 9.9 MB
MITRE ATT&CK
T1027T1059.001T1059.007

Cite this report: https://app.malva.re/sha256/74a102ef95093130da8449cf0cc070a0e57ee5d7b4b6bb449c88e144ebb8761c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
10.34 MB · 10,337,850 B
First seen
2026-10-26 08:30 · 4 hours ago
Last seen
2026-10-26 08:30 · 4 hours ago
Last analysis
2026-10-26 08:30 · 4 hours ago
Hashes
MD5 0d53cd59e54f0ed4ef9f4a884357fa07 Sha1 7da78cc4b2994c66372fc38cd6de109fb8e4a22b Sha256 74a102ef95093130da8449cf0cc070a0e57ee5d7b4b6bb449c88e144ebb8761c Sha384 f09df16a8091dfb0955622dbd8532c490cfd786c81a759cae256242ecbe7a250bce563844834ffecadf5d3cc6c0f8502 Sha512 80b421280b2b1de3b63bd6e1d2c4c963eac04b66a95e1a90e9a48cf104471d4d015498a2dea3ffe9692674eaaa5b298323de15a66c31ef421233bd5ac96ee612 SSDeep 196608:dABXIXRLtbXM+ay1i0sLTu1QwHiMX5IOajHm7PQwVIK3SldeyXPInV7ZO14b0SJq:qWL9bn3fqWtqzeUDQ9aQ2WxPYOZ91wys TLSH 77A65C8716DA52723711FECA8735EC72E14F96532B45CB30B2ADD91A383DD0AB218B53

4 malicious · 4 files
JS0d53cd59e54f0ed4ef9f4a884357fa07
BIN0d53cd59e54f0ed4ef9f4a884357fa07.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\EAGLHhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

4 malicious · 4 files
JS0d53cd59e54f0ed4ef9f4a884357fa07
BIN0d53cd59e54f0ed4ef9f4a884357fa07.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
No malware configuration was found at this point.

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
0d53cd59e54f0ed4ef9f4a884357fa07
Command (emulation JS) #2 UNKNWOWNmalicious
\EAGLHhuhuhuhuhuhuhuhuhuhuhu
0d53cd59e54f0ed4ef9f4a884357fa07
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
0d53cd59e54f0ed4ef9f4a884357fa07
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
0d53cd59e54f0ed4ef9f4a884357fa07 › 0d53cd59e54f0ed4ef9f4a884357fa07.emulated › [Command #1] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙