Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

This sample is a 1.6 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
baf2ee5196d96b10b2e5e5347542c3a9e095b5b183fcbc6a88f44a74b68bc3e6
MD5
55e7f511713a78a7cee9120760292c2b
Verdict
Malicious
File type
JavaScript · 1.6 MB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/baf2ee5196d96b10b2e5e5347542c3a9e095b5b183fcbc6a88f44a74b68bc3e6

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
1.7 MB · 1,704,679 B
Hashes
MD5 55e7f511713a78a7cee9120760292c2b Sha1 5174f89bc03c910d47d125b04c3f9874586aaf60 Sha256 baf2ee5196d96b10b2e5e5347542c3a9e095b5b183fcbc6a88f44a74b68bc3e6 Sha384 207a0d818687e929896337cdda421435520b8e1b3a8723e382e359887e49b6870445003b7f41136b77f7fe21b037acfe Sha512 f7a452806239bd532770a9c9723dd0c42d473a788ac9aac5c9836ec8cef0f90145205d3dd21190766a1ebaf7023e9d57a172b6eaf51a7c0708397a07a7b5feff SSDeep 24576:M2PzIqSIfUgH6jUFQV0tU7b5tXpYUozpZgtSc8iRI6kdsdMMCCZeAqf:Mqzz1UKenY7Ix5JW8ZP6 TLSH 2A85F1314B859F78CAE8FF5C8CB90A39BEA05D5B4F1BE045AE17AC676FF2410411E096

1 malicious · 2 files
JS55e7f511713a78a7cee9120760292c2b
EXE[Base64-Block @0x0004047F]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>pe:exe
Shape scr:js>pe:exe
technique2 nodes

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 2 files
JS55e7f511713a78a7cee9120760292c2b
EXE[Base64-Block @0x0004047F]
No malware configuration was found at this point.

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
55e7f511713a78a7cee9120760292c2b
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
55e7f511713a78a7cee9120760292c2b › [Base64-Block @0x0004047F]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙