Malicious
JavaScript
MD5: 72b44eadac88a15cc1ae3b3b85fde47a
Size: 20.32 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 19.8 KB JavaScript classified as malicious by Malva.RE. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e5e5c47eba8c1d41356652f63de87432e746f7342fda8da08192e6767b8ee6aa
- MD5
- 72b44eadac88a15cc1ae3b3b85fde47a
- Verdict
- Malicious
- File type
- JavaScript · 19.8 KB
Cite this report: https://app.malva.re/sha256/e5e5c47eba8c1d41356652f63de87432e746f7342fda8da08192e6767b8ee6aa
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
20.32 KB · 20,324 B
First seen
2026-10-26 13:45 · 10 hours ago
Last seen
2026-10-26 13:45 · 10 hours ago
Last analysis
2026-10-26 13:45 · 10 hours ago
Hashes
MD5
72b44eadac88a15cc1ae3b3b85fde47a
Sha1
52b7cb732f0498753ffd24e13a9d249bfa1ca6a8
Sha256
e5e5c47eba8c1d41356652f63de87432e746f7342fda8da08192e6767b8ee6aa
Sha384
0bb9e5ebb11b51939154e0fce2fc43297fb0bfbc4f79bc31c48b7b332a77f764117db449fde388d070d014310d24e35c
Sha512
7967524a74d58cc42b8a2bb24a3117332c3671f9606cee656d8fee43c2f0d144c4e266ab53346d07dd709041ec043a5f3421ed939003583511c81e94b638db45
SSDeep
384:8QX4eyHIhMw1LzN/HkgzyL31B8g1ldlTVoRvm2UVIJe6p6F:hX3yohMw1LzNcgzyL3Mg1fZVoRh4IJeJ
TLSH
8D922D0054852584533B6B7BA71AA8E4F7BB276702A14A07F97C3495DFF1E08DEE0CB6
1 malicious · 1 file
JS72b44eadac88a15cc1ae3b3b85fde47aT1027 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1027~T1059.007
Shape
scr:js
technique1 nodes
JScript loader obfusque (emulation bloquee par anti-analyse)
WORDINGmalicious
obfuschuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential