Malicious
JavaScript
MD5: 40311e033f01b868cc68b68951b2ddb7
Size: 126.56 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 123.6 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 3675790d4da85038b5876b37ed0db308cd60053420dce87df8517cd25edd89c2
- MD5
- 40311e033f01b868cc68b68951b2ddb7
- Verdict
- Malicious
- File type
- JavaScript · 123.6 KB
Cite this report: https://app.malva.re/sha256/3675790d4da85038b5876b37ed0db308cd60053420dce87df8517cd25edd89c2
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
126.56 KB · 126,558 B
First seen
2026-10-27 06:45 · an hour ago
Last seen
2026-10-27 06:45 · an hour ago
Last analysis
2026-10-27 06:45 · an hour ago
Hashes
MD5
40311e033f01b868cc68b68951b2ddb7
Sha1
26b293f16f6025827826945e5d8ee712860a574b
Sha256
3675790d4da85038b5876b37ed0db308cd60053420dce87df8517cd25edd89c2
Sha384
4d48f996f988eef39071f474fba7acc7fe444dc63fee58fcad69dedff84e1da1767a7c44ee90f1a07c5b91fe71e08969
Sha512
11976781a35836dfa99419f2896f475232f4ef1f3e71700975cb49d7c3e02ba8cf07fa785dff19007b21a7d6a5fbe3fba934f675fc1d17e025e42fe344113b3f
SSDeep
3072:yfv957Mz+hU5MYuTBjTFFyKc+6Rb4+LYKQGoFF6iOilNcXcD4oB8x6nlWOVepPWW:oW/JT1Wcku
TLSH
98C3AE102BF5501A71F37A019AFA61D14E1BBBAB7A3DD20E10CC168D1F73984AC97B79
1 malicious · 1 file
JS40311e033f01b868cc68b68951b2ddb7T1105 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007~T1105
Shape
scr:js
technique1 nodes
Dropped path (emulation JS) #1
PATHmalicious
\huhuhuhu
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1
URIsuspect
https:huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential