Malicious
Malicious

51855d1c0f80d93b04eb7da72015a751

Share on LinkedIn
Print
JavaScript
MD5: 51855d1c0f80d93b04eb7da72015a751
Size: 4.24 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 4 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f5bbd2733a3ec3fc70d05be49084d6c82763dec4e30129371cda908886f86535
MD5
51855d1c0f80d93b04eb7da72015a751
Verdict
Malicious
File type
JavaScript · 4 MB

Cite this report: https://app.malva.re/sha256/f5bbd2733a3ec3fc70d05be49084d6c82763dec4e30129371cda908886f86535

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
4.24 MB · 4,244,091 B
First seen
2026-10-26 15:30 · 8 hours ago
Last seen
2026-10-26 15:30 · 8 hours ago
Last analysis
2026-10-26 15:30 · 8 hours ago
Hashes
MD5 51855d1c0f80d93b04eb7da72015a751 Sha1 7dee209e490226585ee7e53b73ab9bdab0a7dc33 Sha256 f5bbd2733a3ec3fc70d05be49084d6c82763dec4e30129371cda908886f86535 Sha384 330ad7509a4bb0b080d03ee59dbbe07d2b94dfdb378126bf8c49736fb0a0f9839559d86d447d4fac0d39a6000b53b9fd Sha512 bf5f94f5c3e372883e4c8c3aa39a479f36715015fba23b5eaa5e26b6b680cde96788cbd25d2d0cb64ca8afa18a5a9829ffded10665673143abea06587704d76c SSDeep 98304:ZLycHOZK5xaRd2yhiGnDo/GkjtxfU3c9zH1xNkjHRnAFrNwRmz6B+VkrFo7I2R7r:4xsDaGVj/fUOVxWjH5AFrNwRC98zNb9W TLSH 3416D74213C7A132772BDB9D8235EC31A51A548328D5DB3435BCE31A763ED0B6B5CAE2

4 malicious · 4 files
JS51855d1c0f80d93b04eb7da72015a751
BIN51855d1c0f80d93b04eb7da72015a751.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\QFOLHhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙