Malicious
JavaScript
MD5: 4caded28eb12db6753636315d5a6b494
Size: 136.75 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 133.5 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 156e66c060c328f8100ff4eb71b8e82e7c2686f5c7827ce99c3b76c9c2bd639e
- MD5
- 4caded28eb12db6753636315d5a6b494
- Verdict
- Malicious
- File type
- JavaScript · 133.5 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/156e66c060c328f8100ff4eb71b8e82e7c2686f5c7827ce99c3b76c9c2bd639e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
136.75 KB · 136,750 B
First seen
2026-11-04 08:45 · 55 minutes ago
Last seen
2026-11-04 08:45 · 55 minutes ago
Last analysis
2026-11-04 08:45 · 55 minutes ago
Hashes
MD5
4caded28eb12db6753636315d5a6b494
Sha1
72137776445b9852106597a16b25a1a119426844
Sha256
156e66c060c328f8100ff4eb71b8e82e7c2686f5c7827ce99c3b76c9c2bd639e
Sha384
93641eb56efd87faf6477ba571b83bda0911b048f58eefe5da4cfa7618c81b1dce0b73b7d7a1b010cbe799e95d28c54f
Sha512
e54079a0c57caaeeaf05891f21581abcf8a56f242793836180f27694e6964f69eed0e28f9d801116159b76d4cbcc05a8f111cfc37bce7af975e1634e577f794f
SSDeep
3072:YGKRn/bjbstGercvjLavrTdAZaPXLg9qCa9fgktx9VAP+WwC2TqLuuNDWhpRgStf:8/2nwXnw
TLSH
B3D37A1113EE04ADB27B5A10CEF39A984E677587AA77C21C005D290DEB776409CFBB39
1 malicious · 1 file
JS4caded28eb12db6753636315d5a6b494T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007
Shape
scr:js
technique1 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential