Sign up free
Malicious
Malicious

a5f90748ddd11c879e6076a6e3338afb

Share on LinkedIn
Print
JavaScript
MD5: a5f90748ddd11c879e6076a6e3338afb
Size: 4.49 KB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 4.4 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file and a malware configuration (URLs (emulation JS)). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
4a199355329f0624722b14d6c7a9657c84cf29428114bd455a23be12b06fed90
MD5
a5f90748ddd11c879e6076a6e3338afb
Verdict
Malicious
File type
JavaScript · 4.4 KB
MITRE ATT&CK
T1059.007T1105

Cite this report: https://app.malva.re/sha256/4a199355329f0624722b14d6c7a9657c84cf29428114bd455a23be12b06fed90

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Windows Script File (WSF)
Size
4.49 KB · 4,494 B
First seen
2026-11-04 12:15 · an hour ago
Last seen
2026-11-04 12:15 · an hour ago
Last analysis
2026-11-04 12:15 · an hour ago
Hashes
MD5 a5f90748ddd11c879e6076a6e3338afb Sha1 cfb97e1d9a71f28669dd87b45981247eebbb1993 Sha256 4a199355329f0624722b14d6c7a9657c84cf29428114bd455a23be12b06fed90 Sha384 03187b5bf4b46fecb956909c3b44ed9044c4df4f80e4d3da7b92c823c5669996b6ccaf797764db1b960ad98ff6d26731 Sha512 55ba14f3374ed44b3dc52df294e635cd74cecb38a00a533b02e492801e63ac6a7f5941403b3d0fb8d207eedf2c8ca781c852102ab4f5e32b602aa3f37108fe03 SSDeep 96:9i+5PuYiHgVgBaLYBz/velIdPYoSlY9awJ:9PygHLwHPlYTlEas TLSH A691CE8EBD8EA0698A737338CB7F9108FA7759231546C604FD9CA6511F3141486B8EFD

2 malicious · 2 files
JSa5f90748ddd11c879e6076a6e3338afb
BIN[Job Id=No ID Name=No Name]
JS[JScript] #0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007~T1105
Shape scr:js
malicious 1 nodes

Config. Field Value
URL (emulation JS) #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

URLs in JS Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙