Malicious
Malicious

8d558368bf31876a5098d32c15d71416

Share on LinkedIn
Print
JavaScript
MD5: 8d558368bf31876a5098d32c15d71416
Size: 3.42 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3.3 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
c352d38dac998755f0674bd2089def16d59fca0f9693eaa29eb4410cbf102587
MD5
8d558368bf31876a5098d32c15d71416
Verdict
Malicious
File type
JavaScript · 3.3 MB

Cite this report: https://app.malva.re/sha256/c352d38dac998755f0674bd2089def16d59fca0f9693eaa29eb4410cbf102587

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.42 MB · 3,417,603 B
First seen
2026-10-26 15:30 · 8 hours ago
Last seen
2026-10-26 15:30 · 8 hours ago
Last analysis
2026-10-26 15:30 · 8 hours ago
Hashes
MD5 8d558368bf31876a5098d32c15d71416 Sha1 34bf162bbd8fca0117564e16018130bad088d197 Sha256 c352d38dac998755f0674bd2089def16d59fca0f9693eaa29eb4410cbf102587 Sha384 fded920e24a79ef2d813e9c142a3c0b21cc8d4ce17b8cf61e11b9feeaac245173492808010aa24c93e347b8835732c5b Sha512 f3a2c43762bd77ff6cd9d6f9b2238e6cd877de95020e417d19c4aee48248bb783fd26e0f65efee54cd5ddfd196285610246c42f30c09f5a42012358ca5606024 SSDeep 98304:9YNQQZYvTL2w+15/r6mxWqhqKiJvy30HPVO5cW4Qm73iVfCKeB3/BzsU7CPi72ke:GNQQZYLL2w+15/r6mxWqhqKiJvykHPVe TLSH 0CF5809227C79632332BEB9D4539AD21960A440325C5CB7235BDE71B363EE076F1C6E2

4 malicious · 4 files
JS8d558368bf31876a5098d32c15d71416
BIN8d558368bf31876a5098d32c15d71416.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\HXYHEhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙