Malicious
Malicious

46865d9f040c041ef5570f9aefbc704b

Share on LinkedIn
Print
JavaScript
MD5: 46865d9f040c041ef5570f9aefbc704b
Size: 5.05 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 4.8 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
2f257323ccdc0024a4e705731f6440f41092e2becded230273497d52c6c3c2ca
MD5
46865d9f040c041ef5570f9aefbc704b
Verdict
Malicious
File type
JavaScript · 4.8 MB

Cite this report: https://app.malva.re/sha256/2f257323ccdc0024a4e705731f6440f41092e2becded230273497d52c6c3c2ca

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
5.05 MB · 5,054,756 B
First seen
2026-10-29 14:00 · 2 days ago
Last seen
2026-10-29 14:00 · 2 days ago
Last analysis
2026-10-29 22:47 · 2 days ago
Hashes
MD5 46865d9f040c041ef5570f9aefbc704b Sha1 2c6a9079a9def7674e21dda54d515aa845ae885d Sha256 2f257323ccdc0024a4e705731f6440f41092e2becded230273497d52c6c3c2ca Sha384 0cbcd4807c4f74b517c4d9b1b5c0abd182b088708b2eec35adac8faec4b5fa2fe98753c17569c2ff6437d812371a6a99 Sha512 878e56ae11ae2f900c88d58a0c8bd20746d547b38c41f45b9a41c05f363f13d12e91092a329c9553c04d561c5864c1cf670272782815d1cfeb651bb2a763253d SSDeep 98304:O8ohcaPDLylODWQ1GdXZzhLnUnYEQpBilfIWEtLIB2USGVGs0k7LpujGxTtr4DLE:O26DLylOq/dXZzhLUnYkitL/MBujG4HE TLSH E636E4511BC7F13677299B4C8637D823994AA81355D9CB3C396CC218FB6CC0BA35CAE6

4 malicious · 4 files
JS46865d9f040c041ef5570f9aefbc704b
BIN46865d9f040c041ef5570f9aefbc704b.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\IVIKBhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙