Malicious
JavaScript
MD5: 55e7f511713a78a7cee9120760292c2b
Size: 1.7 MB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 1.6 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- baf2ee5196d96b10b2e5e5347542c3a9e095b5b183fcbc6a88f44a74b68bc3e6
- MD5
- 55e7f511713a78a7cee9120760292c2b
- Verdict
- Malicious
- File type
- JavaScript · 1.6 MB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/baf2ee5196d96b10b2e5e5347542c3a9e095b5b183fcbc6a88f44a74b68bc3e6
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
1.7 MB · 1,704,679 B
Hashes
MD5
55e7f511713a78a7cee9120760292c2b
Sha1
5174f89bc03c910d47d125b04c3f9874586aaf60
Sha256
baf2ee5196d96b10b2e5e5347542c3a9e095b5b183fcbc6a88f44a74b68bc3e6
Sha384
207a0d818687e929896337cdda421435520b8e1b3a8723e382e359887e49b6870445003b7f41136b77f7fe21b037acfe
Sha512
f7a452806239bd532770a9c9723dd0c42d473a788ac9aac5c9836ec8cef0f90145205d3dd21190766a1ebaf7023e9d57a172b6eaf51a7c0708397a07a7b5feff
SSDeep
24576:M2PzIqSIfUgH6jUFQV0tU7b5tXpYUozpZgtSc8iRI6kdsdMMCCZeAqf:Mqzz1UKenY7Ix5JW8ZP6
TLSH
2A85F1314B859F78CAE8FF5C8CB90A39BEA05D5B4F1BE045AE17AC676FF2410411E096
1 malicious · 2 files
JS55e7f511713a78a7cee9120760292c2bT1059.007
EXE[Base64-Block @0x0004047F]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007>pe:exe
Shape
scr:js>pe:exe
technique2 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential