Malicious
JavaScript
MD5: b681cefbb5176dd82549e3e607babd54
Size: 127.84 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 124.8 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 4f1dcf5f02913db699db8e9d138e2cca9d7e7657d7d9bb37c6eef23ab794b22f
- MD5
- b681cefbb5176dd82549e3e607babd54
- Verdict
- Malicious
- File type
- JavaScript · 124.8 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/4f1dcf5f02913db699db8e9d138e2cca9d7e7657d7d9bb37c6eef23ab794b22f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
127.84 KB · 127,838 B
First seen
2026-10-29 05:00 · 43 minutes ago
Last seen
2026-10-29 05:00 · 43 minutes ago
Last analysis
2026-10-29 05:00 · 43 minutes ago
Hashes
MD5
b681cefbb5176dd82549e3e607babd54
Sha1
2493bac1907d83a625151ea6ceea87ef89f8a9ba
Sha256
4f1dcf5f02913db699db8e9d138e2cca9d7e7657d7d9bb37c6eef23ab794b22f
Sha384
abe81b5fd1c7a74107b33f37cb9c3cd0315e531c32561f2b0ecea50228c2535aa06fc1f444ac8f39af3624508a5707be
Sha512
ecffb4c37896aadb5f1ae3d3bd6a25e941964d6914f33105c9d2cf399c20ad4d9a2c777b88d81a8547c3d5d55b5167abc69261143b7958fb8941e9ad8aa3f8ea
SSDeep
3072:UsQcCaEk0b/LhqdvsmVkvhDd7x9yUfT/yxti/ER7Zp7rt6OPMEwAcbn2O3qUc4Yc:KM8x9Q1t/sDnOgYU
TLSH
1CC3C00536E5403EB0F7AE54CBE654916BAF7AE27E3CC19B008D260E0B73456BC93766
1 malicious · 1 file
JSb681cefbb5176dd82549e3e607babd54T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007
Shape
scr:js
technique1 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential