Malicious
Malicious

0e923f876c03739896cb2c65563ed4cd

JavaScript
MD5: 0e923f876c03739896cb2c65563ed4cd
Size: 22.87 KB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 22.3 KB JavaScript classified as malicious by Malva.RE. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
ddf9ef3c7459abc7c0ed9f79a9462c82094d70303147e87e1121e126ef127f18
MD5
0e923f876c03739896cb2c65563ed4cd
Verdict
Malicious
File type
JavaScript · 22.3 KB
MITRE ATT&CK
T1027T1059.007

Cite this report: https://app.malva.re/sha256/ddf9ef3c7459abc7c0ed9f79a9462c82094d70303147e87e1121e126ef127f18

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
22.87 KB · 22,865 B
First seen
2026-10-26 15:45 · 9 hours ago
Last seen
2026-10-26 15:45 · 9 hours ago
Last analysis
2026-10-26 15:45 · 9 hours ago
Hashes
MD5 0e923f876c03739896cb2c65563ed4cd Sha1 77ed7b15916d26dff9d960bf968fdaa93c8dcd0f Sha256 ddf9ef3c7459abc7c0ed9f79a9462c82094d70303147e87e1121e126ef127f18 Sha384 7a95edf425f6e45bbf0d097320c958dd1ad9f5153eb28da0c3bee52f2b40f9f6969200ad4204157685257882d1344453 Sha512 15e4adfbc91e20d7dc8ca5d67c05c55aff51bd7c0bebe4de46e0794fc162a53eb6c0c228b56362fddf10bc33664d3f776099f0da6ab3bddf22cced7bdd1fa315 SSDeep 384:mJ4j+4xc64fV/2aewqaQBHQPeZE6ZuD9PVjD5iS0gjJDaAu:mJa+4xcLV+aewqaQWP2E8c9PVn5iS0Ou TLSH 9AA21C0459852984577B6BBAA72AA8E8FB76076B01814D4BB43C7481EFF1D0DCFE4CB1

1 malicious · 1 file
JS0e923f876c03739896cb2c65563ed4cd
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1027~T1059.007
Shape scr:js
technique1 nodes

JScript loader obfusque (emulation bloquee par anti-analyse) WORDINGmalicious
obfuschuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 1 file
JS0e923f876c03739896cb2c65563ed4cd
No malware configuration was found at this point.

JScript loader obfusque (emulation bloquee par anti-analyse) WORDINGmalicious
obfuschuhuhuhuhuhuhuhuhuhuhu
0e923f876c03739896cb2c65563ed4cd
URLs in JS Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
0e923f876c03739896cb2c65563ed4cd
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙