Malicious
Malicious

17da0d5a70460af75f48a333feb52b57

Share on LinkedIn
Print
JavaScript
MD5: 17da0d5a70460af75f48a333feb52b57
Size: 3.4 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3.2 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
64d21933c071574a17eec2d993cc9048a62d366cd39857e8882dc224df866ebb
MD5
17da0d5a70460af75f48a333feb52b57
Verdict
Malicious
File type
JavaScript · 3.2 MB

Cite this report: https://app.malva.re/sha256/64d21933c071574a17eec2d993cc9048a62d366cd39857e8882dc224df866ebb

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.4 MB · 3,395,761 B
First seen
2026-10-26 15:30 · 8 hours ago
Last seen
2026-10-26 15:30 · 8 hours ago
Last analysis
2026-10-26 15:30 · 8 hours ago
Hashes
MD5 17da0d5a70460af75f48a333feb52b57 Sha1 5cf98ef00369037e4eefad38a1aac56884ef89f3 Sha256 64d21933c071574a17eec2d993cc9048a62d366cd39857e8882dc224df866ebb Sha384 4eb73ae3c8c8cbbcd98fb249de290fee53f28994ad10c074cb8e9c29bf029b416a615c7eeacdd2b7136beeb92a02fb81 Sha512 1956d39eb9fcc881f1fe66b62a14b39193ef09fddcbe0385fa7b2aa8b856d0fe6405502bab5b8b128639fe2eab2d707c468e2a467dd7561349735a5e06d5c670 SSDeep 98304:RaibOFgY4jhcsIPhu14rI1OAFRUkV3BKOL1UznkfA/WaXgT3euzSxi29s4AUpVUh:RaibOFgY4CsIPhuqrKOAFRUkV3BKOL1L TLSH FAF5B48617CB9132732BEB9D8136ED30951A84132485DB30757DE72A353ED0BAF2DAD2

4 malicious · 4 files
JS17da0d5a70460af75f48a333feb52b57
BIN17da0d5a70460af75f48a333feb52b57.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\JNXNHhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙