Malicious
JavaScript
MD5: 0e923f876c03739896cb2c65563ed4cd
Size: 22.87 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 22.3 KB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ddf9ef3c7459abc7c0ed9f79a9462c82094d70303147e87e1121e126ef127f18
- MD5
- 0e923f876c03739896cb2c65563ed4cd
- Verdict
- Malicious
- File type
- JavaScript · 22.3 KB
Cite this report: https://app.malva.re/sha256/ddf9ef3c7459abc7c0ed9f79a9462c82094d70303147e87e1121e126ef127f18
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
22.87 KB · 22,865 B
First seen
2026-10-26 15:45 · 8 hours ago
Last seen
2026-10-26 15:45 · 8 hours ago
Last analysis
2026-10-26 15:45 · 8 hours ago
Hashes
MD5
0e923f876c03739896cb2c65563ed4cd
Sha1
77ed7b15916d26dff9d960bf968fdaa93c8dcd0f
Sha256
ddf9ef3c7459abc7c0ed9f79a9462c82094d70303147e87e1121e126ef127f18
Sha384
7a95edf425f6e45bbf0d097320c958dd1ad9f5153eb28da0c3bee52f2b40f9f6969200ad4204157685257882d1344453
Sha512
15e4adfbc91e20d7dc8ca5d67c05c55aff51bd7c0bebe4de46e0794fc162a53eb6c0c228b56362fddf10bc33664d3f776099f0da6ab3bddf22cced7bdd1fa315
SSDeep
384:mJ4j+4xc64fV/2aewqaQBHQPeZE6ZuD9PVjD5iS0gjJDaAu:mJa+4xcLV+aewqaQWP2E8c9PVn5iS0Ou
TLSH
9AA21C0459852984577B6BBAA72AA8E8FB76076B01814D4BB43C7481EFF1D0DCFE4CB1
1 malicious · 1 file
JS0e923f876c03739896cb2c65563ed4cdT1027 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1027~T1059.007
Shape
scr:js
technique1 nodes
JScript loader obfusque (emulation bloquee par anti-analyse)
WORDINGmalicious
obfuschuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential