Malicious
Malicious

3f0a5084b883f5ffcbbf4bf7063dcbfb

JavaScript
MD5: 3f0a5084b883f5ffcbbf4bf7063dcbfb
Size: 191.93 KB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 187.4 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted a malware configuration (URLs (emulation JS)). It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1047, T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
01846d466b7abc0ab8501daccdbeca13eee02cab20244a07cbc2b122c659d1d4
MD5
3f0a5084b883f5ffcbbf4bf7063dcbfb
Verdict
Malicious
File type
JavaScript · 187.4 KB
MITRE ATT&CK
T1047T1059.007T1105

Cite this report: https://app.malva.re/sha256/01846d466b7abc0ab8501daccdbeca13eee02cab20244a07cbc2b122c659d1d4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
191.93 KB · 191,932 B
First seen
2026-11-03 10:30 · 7 hours ago
Last seen
2026-11-03 10:30 · 7 hours ago
Last analysis
2026-11-03 10:30 · 7 hours ago
Hashes
MD5 3f0a5084b883f5ffcbbf4bf7063dcbfb Sha1 ced5d203ac6c5583c8bc3044a2cfc352bad5844c Sha256 01846d466b7abc0ab8501daccdbeca13eee02cab20244a07cbc2b122c659d1d4 Sha384 579af2bea4a9121572a83277bd87bbbc0fc17fcc690d43694c30e5df4a4adbae3708fa1b0152a07533a5d282a4dde77a Sha512 23d164851d20003407353f743ef5f413ae3fafe6538182622ed9ddaa55b739249b779004207d64de7a14c5fa9452ee63fcc7ae6972d8419c9e675b616e2ba1c0 SSDeep 768:goAi7WAi7xAi7uAi71Ai7DAi7QAi7uAi7cAi7DAi7bAi7zAi7jwir0wirRwirEwJ:F TLSH 21142F2C04774DDAA1BA6D66369E0D00DD7E30AF5EACDA6079CFD6503FF10286174EA8

1 malicious · 1 file
JS3f0a5084b883f5ffcbbf4bf7063dcbfb
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1047~T1059.007~T1105
Shape scr:js
technique1 nodes

Config. Field Value
URL (emulation JS) #1 http:/huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 1 file
JS3f0a5084b883f5ffcbbf4bf7063dcbfb

Config. Field Value
URL (emulation JS) #1 http:/huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
3f0a5084b883f5ffcbbf4bf7063dcbfb
URLs in JS Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
3f0a5084b883f5ffcbbf4bf7063dcbfb
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙