Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

This sample is a 1.6 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
95e7b046825803dd984e46eb76eb5b88d0e0a693548ec4131325d255d2cdbdfb
MD5
77aa8253fe7b818a3d92a9e927fd0a2c
Verdict
Malicious
File type
JavaScript · 1.6 MB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/95e7b046825803dd984e46eb76eb5b88d0e0a693548ec4131325d255d2cdbdfb

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
1.71 MB · 1,708,143 B
First seen
2026-11-04 11:30 · an hour ago
Last seen
2026-11-04 11:30 · an hour ago
Last analysis
2026-11-04 11:30 · an hour ago
Hashes
MD5 77aa8253fe7b818a3d92a9e927fd0a2c Sha1 2b250188b11680eadc84854eb721aa177747ff89 Sha256 95e7b046825803dd984e46eb76eb5b88d0e0a693548ec4131325d255d2cdbdfb Sha384 ceccc571d566eaf1d0502595b0b989ce4c62990245afa7b0b2138d70d9f330e7d4227caee599affdb6a77d49c86ef7ce Sha512 ecebe140ad8f0e0770883e63f4c6e015ec80bc3ef93b9c5816a2fb40e7abf57b0e0c0ade1e5915c420ad88e957de2d49932673ee68694626260026a8a40da7f2 SSDeep 24576:BWZQPA1eAEylkAxxKceCyTybrDkIypZ3k0NI5WX5QRb5eFKvMKu4QlSeCglePQ:BgQtyyu6CTnV0PQ5wAeCYGQ TLSH 5585F13487F4AFF4EAE8450440FA9A179EB006470037E579A6E6BC96EFDA4480337397

1 malicious · 2 files
JS77aa8253fe7b818a3d92a9e927fd0a2c
EXE[Base64-Block @0x0004049C]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>pe:exe
Shape scr:js>pe:exe
technique2 nodes

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 2 files
JS77aa8253fe7b818a3d92a9e927fd0a2c
EXE[Base64-Block @0x0004049C]
No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
77aa8253fe7b818a3d92a9e927fd0a2c › [Base64-Block @0x0004049C]
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
77aa8253fe7b818a3d92a9e927fd0a2c
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙