505f0a9bad25b2726590b0000271b8f5

JavaScript

MD5: 505f0a9bad25b2726590b0000271b8f5

Size: 213.06 KB

application/javascript

Ctrl + scroll to zoom · drag to pan

This sample is a 208.1 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted a malware configuration (URLs (emulation JS)). It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1047, T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 3e20afaa6d26d25dfece628839a26f4a28533981ade4df459adfd4a90670d307
MD5: 505f0a9bad25b2726590b0000271b8f5
Verdict: Malicious
File type: JavaScript · 208.1 KB
MITRE ATT&CK: T1047 T1059.007 T1105

Cite this report: https://app.malva.re/sha256/3e20afaa6d26d25dfece628839a26f4a28533981ade4df459adfd4a90670d307

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

JavaScript file

Size

213.06 KB · 213,059 B

First seen

2026-11-03 10:30 · 6 hours ago

Last seen

2026-11-03 10:30 · 6 hours ago

Last analysis

2026-11-03 10:30 · 6 hours ago

Hashes

MD5 505f0a9bad25b2726590b0000271b8f5 Sha1 a370d06531ea443b80966ef8bc1a136fe939a005 Sha256 3e20afaa6d26d25dfece628839a26f4a28533981ade4df459adfd4a90670d307 Sha384 8e14de74552ed65c084be53f42e43dc21a90addba4f50a6b7083435cee43e4226e1cae99e6adf8e21f9d1734fd3c6ecc Sha512 e25bcd3479f4e553763da846de6908ddccdc53b1685b0d85109618be6e6f4ec124e723db55502ff3cbde277085614e54f6207c7dacaf648948b383fbc3ff68a8 SSDeep 768:U+h2j7BUU6Qh2j7BUU6fh2j7BUU6Uh2j7BUU6fh2j7BUU6xh2j7BUU6Gh2j7BUUW:Oj TLSH 412441385566EBD29E3FA932226F1000CD74BA1B8DEB8D707BDDD5012FF01469524EAB

1 malicious · 1 file

JS505f0a9bad25b2726590b0000271b8f5

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:js~T1047~T1059.007~T1105

Shape scr:js

technique1 nodes

Config. Field	Value
URL (emulation JS) #1	http:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious

#? nehuhuhuhuhuhuhuhuhuhuhu

URLs in JS Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

505f0a9bad25b2726590b0000271b8f5

Overview

Summary by MalvaGPT

Characteristics

File Structure

Malware Configuration — URLs (emulation JS)1

Artefacts2