Malicious
Malicious

58c843646dc4f0f206c8fd680c902eb0

Share on LinkedIn
Print
JavaScript
MD5: 58c843646dc4f0f206c8fd680c902eb0
Size: 4.25 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 4 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
6333577bbfd0bba8fef41d99f08100312121e2efe9e28c8cd7a208ad4b7e98f4
MD5
58c843646dc4f0f206c8fd680c902eb0
Verdict
Malicious
File type
JavaScript · 4 MB
MITRE ATT&CK
T1027T1059.001T1059.007

Cite this report: https://app.malva.re/sha256/6333577bbfd0bba8fef41d99f08100312121e2efe9e28c8cd7a208ad4b7e98f4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
4.25 MB · 4,245,340 B
Hashes
MD5 58c843646dc4f0f206c8fd680c902eb0 Sha1 d10d7146e236d4425c1eb48549be235810d7231a Sha256 6333577bbfd0bba8fef41d99f08100312121e2efe9e28c8cd7a208ad4b7e98f4 Sha384 694bc98d409ca53da3030dce204221c92ab96336f1fbe759983112e5f048b8e4ba607dfc00d45b21a676c673ccb5d951 Sha512 b05bcf78e675292b08906846524e28cbb14d446ff9e4b8e6d7550b4fa8e71a26692c11955ae4ee351d0ac6a1f03c2da51c8b77f4cd1b95a55dae2aedfa686dac SSDeep 98304:i8Q7egxby25Fvg2pw/UbkWhW/JIjV3RyKS4JWm1FD6R7DgSAx0T6l1vTwi6jKb9d:i8Q7egxby25Fvg2pw/UbkWhW/JIjV3RD TLSH 9D16E6B61295D2323321EB8D863BEC3195CEBF2329C5CB30719DF6183A1DE5AA214757

4 malicious · 4 files
JS58c843646dc4f0f206c8fd680c902eb0
BIN58c843646dc4f0f206c8fd680c902eb0.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\OLPYPhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙