Malicious
Malicious

28db017459ff5ce4118e1a35927a9afa

Share on LinkedIn
Print
JavaScript
MD5: 28db017459ff5ce4118e1a35927a9afa
Size: 3.19 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
6b15be5dda46af67c44ab093d0f0b2272e0ff2e61c2de30ac663f1c4e045da10
MD5
28db017459ff5ce4118e1a35927a9afa
Verdict
Malicious
File type
JavaScript · 3 MB

Cite this report: https://app.malva.re/sha256/6b15be5dda46af67c44ab093d0f0b2272e0ff2e61c2de30ac663f1c4e045da10

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.19 MB · 3,193,870 B
First seen
2026-10-30 07:31 · 3 days ago
Last seen
2026-10-30 07:31 · 3 days ago
Last analysis
2026-10-30 07:31 · 3 days ago
Hashes
MD5 28db017459ff5ce4118e1a35927a9afa Sha1 69d10c60e07977aeb496e01acf8b4a6e315dedce Sha256 6b15be5dda46af67c44ab093d0f0b2272e0ff2e61c2de30ac663f1c4e045da10 Sha384 2918ed640665b496240df2b38c662a5c799a73da8e4bde8105a1184509d2b62c884122f81a67afbb012420527955bbe0 Sha512 a9f0170fb65d36a7aacbe54595c23a15a489b8d9d20f56330b3f5e4f65c96c0e29b8fc8e7b8bb294150dc8ca1db48f38bc183911d146711fa1d71b1e775963c9 SSDeep 98304:DxGaWf0xrqEhcUotHJaVTRkOUNZCyjgsHIqthUh0hDy8yB9kkldRTEgpNSAH5lP5:3+rqKhITldS8SAnB7 TLSH 4DE5E7701304D6B1A52DE72CC137AA600ADA3F1B22D6EF3D30B876957352B17275E9E2

4 malicious · 4 files
JS28db017459ff5ce4118e1a35927a9afa
BIN28db017459ff5ce4118e1a35927a9afa.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\VSGWEhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙