Malicious
JavaScript
MD5: 9f49c5a03817bc623893a25ad901a352
Size: 1.1 MB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 1 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 59d8e7c85e8d1eefcd71c27d522a4877d7017744e54b60d2573e97e25d22ad96
- MD5
- 9f49c5a03817bc623893a25ad901a352
- Verdict
- Malicious
- File type
- JavaScript · 1 MB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/59d8e7c85e8d1eefcd71c27d522a4877d7017744e54b60d2573e97e25d22ad96
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
1.1 MB · 1,100,454 B
First seen
2026-10-26 07:45 · 6 hours ago
Last seen
2026-10-26 07:45 · 6 hours ago
Last analysis
2026-10-26 07:45 · 6 hours ago
Hashes
MD5
9f49c5a03817bc623893a25ad901a352
Sha1
3772b81cbb6c59fa20c9f1a83cf6596eb08ed160
Sha256
59d8e7c85e8d1eefcd71c27d522a4877d7017744e54b60d2573e97e25d22ad96
Sha384
5b8aedda9ce28ee4161ace0faa930fa25f7a604515c6c959d8f2c277e4e508bfa42cd25fa60f21dff8d0c44c6f6e113c
Sha512
c9b15b3f47a8eb0c8bb982e7607c74bd614b40fe61fd979a96a461a0a230923119734c3d5ca96eb90b5f8abb9b548da4e6e93561ca9e21ab30e1a667bce13ba6
SSDeep
24576:r9oClp473F12EkMZnAk6dXomuBxLZ0iO2Lo4Ps:u0aLF7Zymr7ezB2s
TLSH
073502300B822FB58EBB050C90FD1706DED23E5F4A6AB64D9F93EBC51EF251A0616197
1 malicious · 2 files
JS9f49c5a03817bc623893a25ad901a352T1059.007
EXE[Base64-Block @0x0004044A]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007>pe:exe
Shape
scr:js>pe:exe
technique2 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential