Malicious
Malicious

1f2c3c37236392a519de3cebf4f3d6ae

Share on LinkedIn
Print
JavaScript
MD5: 1f2c3c37236392a519de3cebf4f3d6ae
Size: 4.07 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3.9 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
92d38cb14e867602d45ac209c2ceb18db262200541c73fabb1716cc83a28f92d
MD5
1f2c3c37236392a519de3cebf4f3d6ae
Verdict
Malicious
File type
JavaScript · 3.9 MB
MITRE ATT&CK
T1027T1059.001T1059.007

Cite this report: https://app.malva.re/sha256/92d38cb14e867602d45ac209c2ceb18db262200541c73fabb1716cc83a28f92d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
4.07 MB · 4,070,074 B
First seen
2026-10-26 07:00 · 6 hours ago
Last seen
2026-10-26 07:00 · 6 hours ago
Last analysis
2026-10-26 07:00 · 6 hours ago
Hashes
MD5 1f2c3c37236392a519de3cebf4f3d6ae Sha1 400be0dda0f8b9431e70611953a486ca704d17af Sha256 92d38cb14e867602d45ac209c2ceb18db262200541c73fabb1716cc83a28f92d Sha384 fe7c8ab1ccd716d9278111ef71b15f08755d2bd589ba32a960b0f734b73d48d2296f0767e7cbb1f59b2e61045495370a Sha512 5750e0eb84bfe666faec18504425b80fccc55bc2407181fb374bcb7b257752229551dad245b7af5c2601ad10d8c5b5ef3c645875e152f0a77bdcb9df3eb4318f SSDeep 98304:4JsGMpEyHbj2FdISj3q5+W70OjhESM8270fCYifA7nfi5nzIKWam2FCr2aS8PD1Y:4LE7MdISj6k5enV20pifA7nfi5nzIKWC TLSH F216E4812B0291F67625BB8C9636DD30B94A71431BC6DF35307CEA5BB65CD07A31CAE2

4 malicious · 4 files
JS1f2c3c37236392a519de3cebf4f3d6ae
BIN1f2c3c37236392a519de3cebf4f3d6ae.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\MCQUBhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙