Malicious
Malicious

a97dd89e628a99dcc567f2885afb8175

JavaScript
MD5: a97dd89e628a99dcc567f2885afb8175
Size: 3.58 KB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 3.5 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file and a malware configuration (URLs (emulation JS)). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
2d792a60273e0b756e5efe2ef9275df360eb55faa365fdb2dffeb4a6ba431846
MD5
a97dd89e628a99dcc567f2885afb8175
Verdict
Malicious
File type
JavaScript · 3.5 KB
MITRE ATT&CK
T1059.007T1105

Cite this report: https://app.malva.re/sha256/2d792a60273e0b756e5efe2ef9275df360eb55faa365fdb2dffeb4a6ba431846

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Windows Script File (WSF)
Size
3.58 KB · 3,583 B
First seen
2026-11-02 08:15 · an hour ago
Last seen
2026-11-02 08:15 · an hour ago
Last analysis
2026-11-02 08:15 · an hour ago
Hashes
MD5 a97dd89e628a99dcc567f2885afb8175 Sha1 09ee215bacc4a53718e2b55262c4a696e538be8c Sha256 2d792a60273e0b756e5efe2ef9275df360eb55faa365fdb2dffeb4a6ba431846 Sha384 4e3e07d55ea6e6ed8826714c5a4a4cf93bb30bf8ae349314b6d248c23382dbade9a9807701a18338ca7234e6c256063b Sha512 3b21643671eb40b631e71be971e5daa65025332b398a13e9731a260cdcfb27683a3ce66ccfeab3ccd6007cc8000a0af01c70ad6f30265e07ec3e4a2acb78ce4c SSDeep 48:Fg8yG5F/d7swsJ1SJWAZjm2jpHHktF7az7GjGz60LI4:Fg8zl7srJoYgJEtF74GjGHLp TLSH EF7114DD6C49A0594E73B33DDB6F9909FFAB55271902C324B89C92002FB1815809EFEC

2 malicious · 2 files
JSa97dd89e628a99dcc567f2885afb8175
BIN[Job Id=No ID Name=No Name]
JS[JScript] #0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007~T1105
Shape scr:js
malicious 1 nodes

Config. Field Value
URL (emulation JS) #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

URLs in JS Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
JSa97dd89e628a99dcc567f2885afb8175
BIN[Job Id=No ID Name=No Name]
JS[JScript] #0

Config. Field Value
URL (emulation JS) #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

URLs in JS Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
a97dd89e628a99dcc567f2885afb8175
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
a97dd89e628a99dcc567f2885afb8175 › [Job Id=No ID Name=No Name] › [JScript] #0
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙