Malicious
JavaScript
MD5: 2de4d108c3ba60fc526b8b8c7b314620
Size: 35.46 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 34.6 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 81ef95042a92c807ea799bc50633a583c4c02cad04e335ca377af91bd3b97651
- MD5
- 2de4d108c3ba60fc526b8b8c7b314620
- Verdict
- Malicious
- File type
- JavaScript · 34.6 KB
Cite this report: https://app.malva.re/sha256/81ef95042a92c807ea799bc50633a583c4c02cad04e335ca377af91bd3b97651
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
35.46 KB · 35,464 B
First seen
2026-11-04 07:46 · an hour ago
Last seen
2026-11-04 07:46 · an hour ago
Last analysis
2026-11-04 07:46 · an hour ago
Hashes
MD5
2de4d108c3ba60fc526b8b8c7b314620
Sha1
f7d211bfecb0c655070f8c72a6ee72a2fd3d4b9e
Sha256
81ef95042a92c807ea799bc50633a583c4c02cad04e335ca377af91bd3b97651
Sha384
b63b6aa792a7ecde9b001b7e4867bd6baf770d0e8872be2c412b76ecc7f3c71b8dd0781c81d556a84d9361f261a629ee
Sha512
6dacf39fadb098328403c7307e25e11126be2755cd303883e3e33a7f577fc7f46be9dcf7b3d188d3dc92c9c64b004200d2deeee49e2db1014f5401604cf2518a
SSDeep
384:oY7v+JcMxyKyjNZlspmxT/ivXNjTCUsmGskDYo:LvtKObvUsmGx
TLSH
BBF2D579D16801A4FFF21D82AC2DAAF829B73DB3152CF52428C73F5C61D44176BA9329
1 malicious · 1 file
JS2de4d108c3ba60fc526b8b8c7b314620T1105 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007~T1105
Shape
scr:js
technique1 nodes
Dropped path (emulation JS) #1
PATHmalicious
\huhuhuhu
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential