Malicious
JavaScript
MD5: a71adaa50d383a7ac86cc6e1ea478b16
Size: 4.37 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 4.3 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted a malware configuration (URLs (emulation JS)). It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 146efc37c7518eaa29be03abe2a42e9e3385f54fced06c060e3e732326a3c3cd
- MD5
- a71adaa50d383a7ac86cc6e1ea478b16
- Verdict
- Malicious
- File type
- JavaScript · 4.3 KB
Cite this report: https://app.malva.re/sha256/146efc37c7518eaa29be03abe2a42e9e3385f54fced06c060e3e732326a3c3cd
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
4.37 KB · 4,371 B
First seen
2026-11-02 13:45 · 6 hours ago
Last seen
2026-11-02 13:45 · 6 hours ago
Last analysis
2026-11-02 13:46 · 6 hours ago
Hashes
MD5
a71adaa50d383a7ac86cc6e1ea478b16
Sha1
6b98152472a265b133816fd0eadc911e4fcc2a77
Sha256
146efc37c7518eaa29be03abe2a42e9e3385f54fced06c060e3e732326a3c3cd
Sha384
0e7c6de28688b15445d06cc9a914b0970c0d90ce8e320821cacb4c17075da53529013e33fde88106ec8591d09bc0ce6e
Sha512
b895310ede0ece2db15acd08739db36dd970420c52dac44d6a2e3935b214ee38b5daa83d1f184a65f35ede0719f1ff390457c2434ddc3ea427bf94c3fb8e624f
SSDeep
96:0pw5PuYiHgVgBaLYBz/velIdPYoSlY9awp:0pwygHLwHPlYTlEaY
TLSH
A791CC8EBD8AA0698A737338CB6F5108FA774A63154AC604F99CB6511F3141486B8EFD
1 malicious · 1 file
JSa71adaa50d383a7ac86cc6e1ea478b16T1105 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007~T1105
Shape
scr:js
technique1 nodes
| Config. Field | Value |
|---|---|
| URL (emulation JS) #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialTrace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential