3f0a5084b883f5ffcbbf4bf7063dcbfb

JavaScript

MD5: 3f0a5084b883f5ffcbbf4bf7063dcbfb

Size: 191.93 KB

application/javascript

Ctrl + scroll to zoom · drag to pan

This sample is a 187.4 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted a malware configuration (URLs (emulation JS)). It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1047, T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 01846d466b7abc0ab8501daccdbeca13eee02cab20244a07cbc2b122c659d1d4
MD5: 3f0a5084b883f5ffcbbf4bf7063dcbfb
Verdict: Malicious
File type: JavaScript · 187.4 KB
MITRE ATT&CK: T1047 T1059.007 T1105

Cite this report: https://app.malva.re/sha256/01846d466b7abc0ab8501daccdbeca13eee02cab20244a07cbc2b122c659d1d4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

JavaScript file

Size

191.93 KB · 191,932 B

First seen

2026-11-03 10:30 · 6 hours ago

Last seen

2026-11-03 10:30 · 6 hours ago

Last analysis

2026-11-03 10:30 · 6 hours ago

Hashes

MD5 3f0a5084b883f5ffcbbf4bf7063dcbfb Sha1 ced5d203ac6c5583c8bc3044a2cfc352bad5844c Sha256 01846d466b7abc0ab8501daccdbeca13eee02cab20244a07cbc2b122c659d1d4 Sha384 579af2bea4a9121572a83277bd87bbbc0fc17fcc690d43694c30e5df4a4adbae3708fa1b0152a07533a5d282a4dde77a Sha512 23d164851d20003407353f743ef5f413ae3fafe6538182622ed9ddaa55b739249b779004207d64de7a14c5fa9452ee63fcc7ae6972d8419c9e675b616e2ba1c0 SSDeep 768:goAi7WAi7xAi7uAi71Ai7DAi7QAi7uAi7cAi7DAi7bAi7zAi7jwir0wirRwirEwJ:F TLSH 21142F2C04774DDAA1BA6D66369E0D00DD7E30AF5EACDA6079CFD6503FF10286174EA8

1 malicious · 1 file

JS3f0a5084b883f5ffcbbf4bf7063dcbfb

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:js~T1047~T1059.007~T1105

Shape scr:js

technique1 nodes

Config. Field	Value
URL (emulation JS) #1	http:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious

#? nehuhuhuhuhuhuhuhuhuhuhu

URLs in JS Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

3f0a5084b883f5ffcbbf4bf7063dcbfb

Overview

Summary by MalvaGPT

Characteristics

File Structure

Malware Configuration — URLs (emulation JS)1

Artefacts2