Malicious
Malicious

2aaf0269c8d98da14632f2d0591152ff

Share on LinkedIn
Print
JavaScript
MD5: 2aaf0269c8d98da14632f2d0591152ff
Size: 3.58 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3.4 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
7166f57cf7efe16c403d54622e6ff263b92c6dcc2e7b080035ff84cfdcb79ca2
MD5
2aaf0269c8d98da14632f2d0591152ff
Verdict
Malicious
File type
JavaScript · 3.4 MB

Cite this report: https://app.malva.re/sha256/7166f57cf7efe16c403d54622e6ff263b92c6dcc2e7b080035ff84cfdcb79ca2

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.58 MB · 3,582,006 B
First seen
2026-10-29 09:15 · yesterday
Last seen
2026-10-29 09:15 · yesterday
Last analysis
2026-10-29 09:16 · yesterday
Hashes
MD5 2aaf0269c8d98da14632f2d0591152ff Sha1 fad1e293b3572bca8c5d27b15835060761b0165b Sha256 7166f57cf7efe16c403d54622e6ff263b92c6dcc2e7b080035ff84cfdcb79ca2 Sha384 96c554980e4b72b43c26d894e192a4487e9f847ccd2f206c508fb57a0d6ed856952812c1a56596ad492e6dfde2550abf Sha512 3bfafa7d5a8069c7da283b552e4fa27d5469202b65ddd1fe75f40b810c19653d3630ab60f408e1c96ccc864c3dab02bf267f2fe657b6bfb5497fe9a3a4130a9f SSDeep 98304:f2NUFMNI6fKoDnS+Kp69KEsIyOzFLEANlQTwL37KlIlaVyC75bfL0XSNJKXVdvfL:fQyOhJW+K09KEshmFEAzbLmVv75JvKFl TLSH 70F59F851EC7F273B838095CC91B9AE30AA59C5BB910DE3D7DE866DEFB49B053218344

4 malicious · 4 files
JS2aaf0269c8d98da14632f2d0591152ff
BIN2aaf0269c8d98da14632f2d0591152ff.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\UMGSZhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙