Malicious
Malicious

64ddeba149073fa306ec47dec8043649

Share on LinkedIn
Print
JavaScript
MD5: 64ddeba149073fa306ec47dec8043649
Size: 3.58 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3.4 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
d22510adfee4cd63cc3dbb606c88b8a6ec7642fd50da40dcde13d37ecd361813
MD5
64ddeba149073fa306ec47dec8043649
Verdict
Malicious
File type
JavaScript · 3.4 MB

Cite this report: https://app.malva.re/sha256/d22510adfee4cd63cc3dbb606c88b8a6ec7642fd50da40dcde13d37ecd361813

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.58 MB · 3,582,014 B
First seen
2026-10-29 09:15 · 3 days ago
Last seen
2026-10-29 09:15 · 3 days ago
Last analysis
2026-10-29 09:16 · 3 days ago
Hashes
MD5 64ddeba149073fa306ec47dec8043649 Sha1 38f34112c053fd25d424796f4c6ea22c53e4a95a Sha256 d22510adfee4cd63cc3dbb606c88b8a6ec7642fd50da40dcde13d37ecd361813 Sha384 87c7ada8cb449437f60612fc658462c298a645421e771580146bca05951caa5eae6feb03d48d4ec46c7397769217fc71 Sha512 83dc0feda3ce116c35e355e11636075afff1149f3aef7cd8e5987d9dfa7af9eeb65868747ea31f77a6a41e1e82135cc70381d06cf25c3e441d5d910eabd26a96 SSDeep 98304:UpRjoMEdXXzZQqO9pmdrKhyAzabgZTgTYdZsBtzc50ROJgZxot9md4ZOmhLy8lFk:5OHwKhpabKTgsduBtw5Iivq TLSH 97F54A482DC3F776E4A8285C8E0F6BD30A259D47EE90D83F3D2595E6E749BD23228315

4 malicious · 4 files
JS64ddeba149073fa306ec47dec8043649
BIN64ddeba149073fa306ec47dec8043649.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\LCJGShuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙