Sign up free
Malicious
Malicious

5ea0497dd7eac0ea6fe4dee1f8aa6c0f

Share on LinkedIn
Print
JavaScript
MD5: 5ea0497dd7eac0ea6fe4dee1f8aa6c0f
Size: 3.19 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
54225c4e081832c7621bca738ff1019dab8ea3d330be4e24c5f2604ac219f287
MD5
5ea0497dd7eac0ea6fe4dee1f8aa6c0f
Verdict
Malicious
File type
JavaScript · 3 MB

Cite this report: https://app.malva.re/sha256/54225c4e081832c7621bca738ff1019dab8ea3d330be4e24c5f2604ac219f287

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.19 MB · 3,188,406 B
First seen
2026-10-29 09:15 · 4 days ago
Last seen
2026-10-29 09:15 · 4 days ago
Last analysis
2026-10-29 09:15 · 4 days ago
Hashes
MD5 5ea0497dd7eac0ea6fe4dee1f8aa6c0f Sha1 d8053005f2e5049de901befa25efe13ebae54370 Sha256 54225c4e081832c7621bca738ff1019dab8ea3d330be4e24c5f2604ac219f287 Sha384 c0ccaa98fbba62c621b9a99ab169f531487486142f0a57075bca0dad8cbec7029b785b76b50f95c82f4f4f43617d2ff9 Sha512 06e42a4c5d65930240c1d657773c693545dffd9658a16c458e19be9aaabe4f948c3eed9112fc3944db9fc1197a0b66886171282ff95567272abad1cd8af27175 SSDeep 98304:mBNmIQmCu7Lo3jIsbrJSUOPxGFT1XRLjNgn7gpeXCPM6ZxWqDVeq:alQH2ojbrEtPx0NR/67gkXWMTg TLSH 84E58D701974C2B32138CA5DC007BDA60AC67F5F68D1DA367AACBA4E6E0DE16F758344

4 malicious · 4 files
JS5ea0497dd7eac0ea6fe4dee1f8aa6c0f
BIN5ea0497dd7eac0ea6fe4dee1f8aa6c0f.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\JRTVYhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙