This sample is a 25.9 MB JavaScript. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 43 embedded or derived files. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 5679fad9147c523a5db5f2e3bf8bcbde8cf44baca6eb706ae30ff20fd306fe5f
- MD5
- b16cd3e21ddf8967f3e1c088a1cc9690
- Verdict
- No known threat found
- File type
- JavaScript · 25.9 MB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/5679fad9147c523a5db5f2e3bf8bcbde8cf44baca6eb706ae30ff20fd306fe5f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
pe:exe~T1059.007>pe:rsrc>pe:dll>pe:rsrc>img
pe:exe>pe:rsrc>pe:dll>pe:rsrc>img
pe:exe~T1059.007>pe:rsrc>pe:dll>pe:rsrc>bin
pe:exe>pe:rsrc>pe:dll>pe:rsrc>bin
| Name | Value |
|---|---|
| Info | Authenticode present at 0x19E3200 size 1720 bytes |