Malicious
Malicious

64afe304ac2f9ff9eb4043bd32dc85ba

Share on LinkedIn
Print
JavaScript
MD5: 64afe304ac2f9ff9eb4043bd32dc85ba
Size: 126.95 KB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 124 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
8904c00020845d00515f1f09b000dd72c03e6de19af6faa07cab69dfbeda91ad
MD5
64afe304ac2f9ff9eb4043bd32dc85ba
Verdict
Malicious
File type
JavaScript · 124 KB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/8904c00020845d00515f1f09b000dd72c03e6de19af6faa07cab69dfbeda91ad

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
126.95 KB · 126,948 B
Hashes
MD5 64afe304ac2f9ff9eb4043bd32dc85ba Sha1 fc0f60467f7ad55527dd0ad5980c4a629a414279 Sha256 8904c00020845d00515f1f09b000dd72c03e6de19af6faa07cab69dfbeda91ad Sha384 b174b3ba4692e6c5866aad338fca98593a51b128f91963f285526ea5b5fe80fa16e6911336712bd848ec469e4f3a8e61 Sha512 a22d3c178571333b4466beb6261392f4276167dafb603e3b9a3c05cfa017917b2951b56c4c9d25d8c983621f2ae980126e4169f63d4c9778c7dfe87f782750fd SSDeep 3072:oPHyEq8ygVuNtmQKY8TuFnHYj8NRtt5cz7jKLxqdQBuojLc9FIUIuHpZDxEYf8El:Pgwt8o+IUpKAB TLSH 7CC3EE83B6D5505AB177AD449EB2A4A41F277AD9E339D00A00CC164F4BF39148AD3B7F

1 malicious · 1 file
JS64afe304ac2f9ff9eb4043bd32dc85ba
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007
Shape scr:js
technique1 nodes

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙