ad51353256f1b10e606286e3ece956af

JavaScript

MD5: ad51353256f1b10e606286e3ece956af

Size: 1.95 MB

application/javascript

Ctrl + scroll to zoom · drag to pan

This sample is a 1.9 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 5 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: c789ad97aa0b71f852e73dae4e342e5a46d8e1bd2061a75ad44f9745ac83859c
MD5: ad51353256f1b10e606286e3ece956af
Verdict: Malicious
File type: JavaScript · 1.9 MB
MITRE ATT&CK: T1027 T1059.007 T1105

Cite this report: https://app.malva.re/sha256/c789ad97aa0b71f852e73dae4e342e5a46d8e1bd2061a75ad44f9745ac83859c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

JavaScript file

Size

1.95 MB · 1,946,106 B

First seen

2026-10-26 13:15 · an hour ago

Last seen

2026-10-26 13:15 · an hour ago

Last analysis

2026-10-26 13:15 · an hour ago

Hashes

MD5 ad51353256f1b10e606286e3ece956af Sha1 406f5c25824b246e5d8228c18f4169b7972c42fa Sha256 c789ad97aa0b71f852e73dae4e342e5a46d8e1bd2061a75ad44f9745ac83859c Sha384 cd74f9d7aec2f870409a8eb3af2a3fc19b6cf8952cc19072321b5b26b4033d644917c38696a1ee406f9f214c67a92325 Sha512 fae9033a7d322377cc761a161ba76b744e6ee220fbae91f659cd0af02b4abc16f3fba1d006f98efa0aaa8bc804900ca42ecb1dcae399b831a5c6e4ee88c3f227 SSDeep 24576:+dm9lIsBw45J2FS7NzRc+hKxMFsDg/5GvMGRuMtXxXN1WygMBS0g:hlI0d2E7lw+ogkkGUIxfWM0 TLSH 2E95A6B820F59751A5BBC08746B8DBDCE6A720375D723BC4C5866BECBC5329F5B4A020

2 malicious · 2 files

JSad51353256f1b10e606286e3ece956af

BINad51353256f1b10e606286e3ece956af.emulated

JS[Stage #1].js

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:js~T1027~T1059.007~T1105

Shape scr:js

malicious 1 nodes

Command (emulation JS) #1 UNKNWOWNmalicious

"\WKTAhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #1 PATHmalicious

\WKTAQhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #2 PATHmalicious

\WKTAQhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #3 PATHmalicious

\WKTAQhuhuhuhuhuhuhuhuhuhuhu

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious

#? evhuhuhuhuhuhuhuhuhuhuhu

Command (emulation JS) #1 UNKNWOWNmalicious

"\IDEAhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #1 PATHmalicious

\IDEAThuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #2 PATHmalicious

\IDEAThuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #3 PATHmalicious

\IDEAThuhuhuhuhuhuhuhuhuhuhu

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious

#? nehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

2 malicious · 2 files

JSad51353256f1b10e606286e3ece956af

BINad51353256f1b10e606286e3ece956af.emulated

JS[Stage #1].js

No malware configuration was found at this point.

Command (emulation JS) #1 UNKNWOWNmalicious

"\WKTAhuhuhuhuhuhuhuhuhuhuhu