Malicious
Malicious

6341de9833cb0796ee4999314d392d03

JavaScript
MD5: 6341de9833cb0796ee4999314d392d03
Size: 5.19 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 4.9 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
7571d3f4f3f79f66ae9d04c18081c90b6ece566137f419291b403f44f6220b6c
MD5
6341de9833cb0796ee4999314d392d03
Verdict
Malicious
File type
JavaScript · 4.9 MB
MITRE ATT&CK
T1027T1059.001T1059.007

Cite this report: https://app.malva.re/sha256/7571d3f4f3f79f66ae9d04c18081c90b6ece566137f419291b403f44f6220b6c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
5.19 MB · 5,187,089 B
First seen
2026-10-26 07:45 · 6 hours ago
Last seen
2026-10-26 07:45 · 6 hours ago
Last analysis
2026-10-26 07:46 · 6 hours ago
Hashes
MD5 6341de9833cb0796ee4999314d392d03 Sha1 f0294323719e69606c041a68e516022c27253da8 Sha256 7571d3f4f3f79f66ae9d04c18081c90b6ece566137f419291b403f44f6220b6c Sha384 dc31e2e3433e9bb6353c75091990fca7607ad3ac383b6c37ed22dc7031297917517fa9daf5f1aeefd19ce6a0acbc0573 Sha512 4a84fdce9c0082ef8d39c2ad7ef2ad24fa43b11c7547e161273fc712ec0baeddce4db2f310b6d8fc6bc087c329fbd9b23277528955a6c4a84e45c2ec2b54caca SSDeep 98304:Jes04eS+s165vL/rJPZ56ieEzQDYiQnu/yIohH34my2SdcBkP19c4DlKYo/AcQG6:Jes04eS+s165vL/rJB56ieEzQDYiQnuv TLSH A736D58217C75232332AEBCD8639DC71950A95632589CB3075BDE71A343EE1BAB1C793

4 malicious · 4 files
JS6341de9833cb0796ee4999314d392d03
BIN6341de9833cb0796ee4999314d392d03.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\YHJPLhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

4 malicious · 4 files
JS6341de9833cb0796ee4999314d392d03
BIN6341de9833cb0796ee4999314d392d03.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
No malware configuration was found at this point.

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
6341de9833cb0796ee4999314d392d03
Command (emulation JS) #2 UNKNWOWNmalicious
\YHJPLhuhuhuhuhuhuhuhuhuhuhu
6341de9833cb0796ee4999314d392d03
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
6341de9833cb0796ee4999314d392d03
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
6341de9833cb0796ee4999314d392d03 › 6341de9833cb0796ee4999314d392d03.emulated › [Command #1] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙