Malicious
608ca46dd98407ae072c49f4d76b5764
JavaScript
MD5: 608ca46dd98407ae072c49f4d76b5764
Size: 7.49 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 7.3 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 7 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001, T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- feebda23e0ee4ca8bca116242aa3cf17452d8f8e3fa3c140069ece47064a4954
- MD5
- 608ca46dd98407ae072c49f4d76b5764
- Verdict
- Malicious
- File type
- JavaScript · 7.3 KB
Cite this report: https://app.malva.re/sha256/feebda23e0ee4ca8bca116242aa3cf17452d8f8e3fa3c140069ece47064a4954
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
7.49 KB · 7,488 B
First seen
2026-11-03 12:15 · 5 hours ago
Last seen
2026-11-03 12:15 · 5 hours ago
Last analysis
2026-11-03 12:15 · 5 hours ago
Hashes
MD5
608ca46dd98407ae072c49f4d76b5764
Sha1
350c41e8c666c28d46b44479e216dc0277f42e4d
Sha256
feebda23e0ee4ca8bca116242aa3cf17452d8f8e3fa3c140069ece47064a4954
Sha384
02b1efefd75d12545c6a4ba5bfa6bfc82db5fd5f0d0f55aabed1da6824da334e951697ae9a4b3bba6e3aa7bbf7b92131
Sha512
78233e9148f4d67fa3122f14b75ee19bb1a308f30a6fee5df6480436e25b76f462ff2860cb409255583767f1f0c615b82e60ba831cd0d9720eab64934c1c7ae6
SSDeep
48:nNdUgzUmTheZYN4Apia73Dem/eXJWQz2MWHZpdHofhMRQrUy2iDtCvRFujJ:NdUgzUAh3+M39/WYPtZfmWqUFQJ
TLSH
DDF1DDDD6C8A60689D73733C8B7FA018FB775A276206C600BD8D97502F7170492A9EED
3 malicious · 3 files
JS608ca46dd98407ae072c49f4d76b5764T1027 · T1105 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007~T1105>scr:ps1~T1027~T1059.001
Shape
scr:js>scr:ps1
malicious
2 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
JS608ca46dd98407ae072c49f4d76b5764T1027 · T1105 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
608ca46dd98407ae072c49f4d76b5764
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account