Malicious
JavaScript
MD5: 3366718e7b9e9282e33fb79598fd936a
Size: 4.05 MB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 3.9 MB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 7bcc28e8c5b0bfa9bcd311331c07d1e7bdeacc354b232f794c454fa083a2d64c
- MD5
- 3366718e7b9e9282e33fb79598fd936a
- Verdict
- Malicious
- File type
- JavaScript · 3.9 MB
Cite this report: https://app.malva.re/sha256/7bcc28e8c5b0bfa9bcd311331c07d1e7bdeacc354b232f794c454fa083a2d64c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
4.05 MB · 4,051,445 B
First seen
2026-11-04 07:00 · 2 hours ago
Last seen
2026-11-04 07:00 · 2 hours ago
Last analysis
2026-11-04 07:00 · 2 hours ago
Hashes
MD5
3366718e7b9e9282e33fb79598fd936a
Sha1
1c255106a7d3774752a2b79d0793e6a6735d7f81
Sha256
7bcc28e8c5b0bfa9bcd311331c07d1e7bdeacc354b232f794c454fa083a2d64c
Sha384
cb4b5f253ba890caef00b886f36b554eec0c5f1e306813e8e3a733a80f5a2fd0823dd9b3301019bd0fa92aaa928db3e0
Sha512
97bc007d56388078f59e77b20f51a1fa9ecf72bab82a7d5a67cb7782780ab8dcdd02ee91fb8cf2ea21b119a117d3c98dee791204c4b9ac36a498b26aea044e34
SSDeep
98304:d19n48UJg/U4P2DWsmbcjIA9SJ6sOLAkguf3Q3u4ydn8arMl24EkJBJF8JQD/RZY:d1a8UJgfwJvQ48aww41F8yHfGAI3jXyk
TLSH
D616E82FC660DE1E3BAD0ECD1DE7E1D86D8FFAD8C08CE9C3E1539190BB184959562264
1 malicious · 1 file
JS3366718e7b9e9282e33fb79598fd936aT1105 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007~T1105
Shape
scr:js
technique1 nodes
Command (emulation JS) #1
UNKNWOWNmalicious
"\ITCUhuhuhuhuhuhuhuhuhuhuhu
Dropped path (emulation JS) #1
PATHmalicious
\ITCUDhuhuhuhuhuhuhuhuhuhuhu
Dropped path (emulation JS) #2
PATHmalicious
\ITCUDhuhuhuhuhuhuhuhuhuhuhu
Dropped path (emulation JS) #3
PATHmalicious
\ITCUDhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential