Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

This sample is a 1.6 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
fedae371dc02132501676259ec8d4e45a7dfef71697bb0b49885d9e69924d4a7
MD5
8d83eb67f73fdf05561a839cfabdaa79
Verdict
Malicious
File type
JavaScript · 1.6 MB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/fedae371dc02132501676259ec8d4e45a7dfef71697bb0b49885d9e69924d4a7

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
1.71 MB · 1,710,506 B
First seen
2026-11-04 08:45 · an hour ago
Last seen
2026-11-04 08:45 · an hour ago
Last analysis
2026-11-04 08:45 · an hour ago
Hashes
MD5 8d83eb67f73fdf05561a839cfabdaa79 Sha1 e80429bba4cde0db31f9d33b0f70634f47f02d82 Sha256 fedae371dc02132501676259ec8d4e45a7dfef71697bb0b49885d9e69924d4a7 Sha384 d3b80eab528026bbf8f99f0598c52a6edd14cd32fa32776af61659c7fd1e99759bd3c0a9bcfbd77ce8d00004f230e6ef Sha512 45872598945d66f27ed1d17d69bf576bea1b306073b1628795666a647e7419866d6168fe39ef4b12864e1f97aa09aaef6a6907d9572aa8f4b1b42404de1770df SSDeep 24576:Bbrcbs1hogFDUB+ZumUAfkIwdmUZph2rmQjfHkYDrNwALZEkaIZyikUYh/T1Dykl:9rBLzhf8ISwmQ3G+kUYhb7 TLSH 8A85023C64801EB6CAD8EA34B2798D0E9EB4114FF057AB55EB27ED065BDB401A10B1F7

1 malicious · 2 files
JS8d83eb67f73fdf05561a839cfabdaa79
EXE[Base64-Block @0x00040598]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>pe:exe
Shape scr:js>pe:exe
technique2 nodes

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 2 files
JS8d83eb67f73fdf05561a839cfabdaa79
EXE[Base64-Block @0x00040598]
No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
8d83eb67f73fdf05561a839cfabdaa79 › [Base64-Block @0x00040598]
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
8d83eb67f73fdf05561a839cfabdaa79
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙