Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

This sample is a 1.6 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
cad23b194b75ab368c7062fae024c9355f578fa45637efa1a39c7d93eeca5053
MD5
a71a0d7abc421fddc5a9929a5df7239d
Verdict
Malicious
File type
JavaScript · 1.6 MB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/cad23b194b75ab368c7062fae024c9355f578fa45637efa1a39c7d93eeca5053

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
1.71 MB · 1,707,866 B
First seen
2026-11-04 11:30 · an hour ago
Last seen
2026-11-04 11:30 · an hour ago
Last analysis
2026-11-04 11:30 · an hour ago
Hashes
MD5 a71a0d7abc421fddc5a9929a5df7239d Sha1 4abcd933d52507a7c6e42ad10921660363a29e8e Sha256 cad23b194b75ab368c7062fae024c9355f578fa45637efa1a39c7d93eeca5053 Sha384 e5fff24ac7a05ae1d478b968ab69ec4c3da9aa91a9b4da8d06b0b0ac12be0debf32bc50c91b9be451cca2303df096a77 Sha512 84a928399671333e678097aaf56713d7ceb61a88e5dc804871de8ffadb697f01cdb4681d9a15ab6a12a2576843cf809d4d906b9c7d443608ad120c97386488ac SSDeep 24576:B1Io0zBAS4iioMHuLiws1aebHVpGkMTH0NRP0lx509yG/EB1gbYq0O9ckXvKO:BzMA1iiCoZZ5okyeogFx9Jvx TLSH B285F1B04AD4EBF4FADC5F0C80F91A69BFA0064B4017A47D9622BD575EB244801BF7A7

1 malicious · 2 files
JSa71a0d7abc421fddc5a9929a5df7239d
EXE[Base64-Block @0x0004045C]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>pe:exe
Shape scr:js>pe:exe
technique2 nodes

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 2 files
JSa71a0d7abc421fddc5a9929a5df7239d
EXE[Base64-Block @0x0004045C]
No malware configuration was found at this point.

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
a71a0d7abc421fddc5a9929a5df7239d
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
a71a0d7abc421fddc5a9929a5df7239d › [Base64-Block @0x0004045C]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙