Malicious
JavaScript
MD5: 2476adaa82dd545956ae6e6ddb0be789
Size: 134.38 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 131.2 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 8b01a0ed38a9854023048b6b3e4b3499a000a0f83a8d88f2d2975a7111614506
- MD5
- 2476adaa82dd545956ae6e6ddb0be789
- Verdict
- Malicious
- File type
- JavaScript · 131.2 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/8b01a0ed38a9854023048b6b3e4b3499a000a0f83a8d88f2d2975a7111614506
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
134.38 KB · 134,382 B
First seen
2026-10-31 08:30 · an hour ago
Last seen
2026-10-31 08:30 · an hour ago
Last analysis
2026-10-31 08:30 · an hour ago
Hashes
MD5
2476adaa82dd545956ae6e6ddb0be789
Sha1
954c28750084aae040fdc336fd242dfaacb26d9e
Sha256
8b01a0ed38a9854023048b6b3e4b3499a000a0f83a8d88f2d2975a7111614506
Sha384
7b0c6837a6935ae748344cfc3d986576d17f2697c0fa357b9a9973fd8fba8315e9702d945de130d3f551ec7fb2964611
Sha512
27e929399d13748eda23e2d4f11203c7693141fde1632abedf32cebfd11f417d8e1737b8b88c97d4c4944b1fc5b8ac6188fade1d3f9e48f910be0cf2b70c3ae1
SSDeep
3072:ADwJ1lrWShabI9REV8pV0TVJWJRTPa+r6BXSklYLeyfDraV1YnnU8CJL5vdE4uP/:J0TVDcLeBV/LiTD
TLSH
A8D3810136EA586CF4FB2E51CEF628B1096FBB926535D51E00C8154E1F63E62DCE3B26
1 malicious · 1 file
JS2476adaa82dd545956ae6e6ddb0be789T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007
Shape
scr:js
technique1 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential