Malicious
Malicious

1db02f2856f6d30e381caaa0470b09ef

Share on LinkedIn
Print
JavaScript
MD5: 1db02f2856f6d30e381caaa0470b09ef
Size: 3.18 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
d864c817ed02ff63dada3d47f50073aca455674e80fecafc126bc245327b4a6c
MD5
1db02f2856f6d30e381caaa0470b09ef
Verdict
Malicious
File type
JavaScript · 3 MB

Cite this report: https://app.malva.re/sha256/d864c817ed02ff63dada3d47f50073aca455674e80fecafc126bc245327b4a6c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.18 MB · 3,184,758 B
First seen
2026-10-29 09:15 · 2 days ago
Last seen
2026-10-29 09:15 · 2 days ago
Last analysis
2026-10-29 09:15 · 2 days ago
Hashes
MD5 1db02f2856f6d30e381caaa0470b09ef Sha1 3a29adad31a3a674721f66b916fb5780d5bb3627 Sha256 d864c817ed02ff63dada3d47f50073aca455674e80fecafc126bc245327b4a6c Sha384 759c88849a7b4b139973b5b5bd75c6c2566f10b0ebeef22fbdb6d9a58506eca929cf4661f6c80a0f8199c547d284d01b Sha512 683dafe0fe06d4e5700beb22fbf4a8c07da04b5243e1a88fd053a21ca8ddbef691d67d13dc8f05ff0df492d5a0d2fa21c2ba1c94b13e031f412c018ba8bbb85e SSDeep 98304:hCnb32M8Rgb0ASu3cj93UbGhbWQR5QPLn4ciTGjP6+5:hCnb32M8RgARusj9UG0QR248PL5 TLSH F6E56B311155E2B22128DF1DC40B69E60FC8BF6B68D1DF3537A8B98F6A49F207798349

4 malicious · 4 files
JS1db02f2856f6d30e381caaa0470b09ef
BIN1db02f2856f6d30e381caaa0470b09ef.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\WGIFHhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙