Malicious
HTML
MD5: bc3d766ca20b95fa50f9b8fab77e52a1
Size: 7.13 KB
text/html
Ctrl + scroll to zoom · drag to pan
This sample is a 7 KB HTML classified as malicious by Malva.RE. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- b0dfe7873d148fe87d98407e51d75cff65db3a856801a17c323821d336883fe7
- MD5
- bc3d766ca20b95fa50f9b8fab77e52a1
- Verdict
- Malicious
- File type
- HTML · 7 KB
Cite this report: https://app.malva.re/sha256/b0dfe7873d148fe87d98407e51d75cff65db3a856801a17c323821d336883fe7
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
7.13 KB · 7,134 B
First seen
2026-11-01 11:15 · 2 days ago
Last seen
2026-11-01 11:15 · 2 days ago
Last analysis
2026-11-01 11:15 · 2 days ago
Hashes
MD5
bc3d766ca20b95fa50f9b8fab77e52a1
Sha1
34ad8c3e1c9c0ecb5a975f3af726ea76fb8ef2e5
Sha256
b0dfe7873d148fe87d98407e51d75cff65db3a856801a17c323821d336883fe7
Sha384
f9eeedee5448d777f4369b2c01ae371fac8bc08cc97b213c3218f3eaece7075cd4fe60ffcb193d9aa9bd4b7bf78a7036
Sha512
c167670f85aaae05911799fb462e2fe47f0c3b1c4a96dce44df27c76163d32d2337fb68f5123a754881bad286859829ea81b58b0c7d43472521b1219ab8722cd
SSDeep
96:smy+6NsGwhTHQpD+da6+2lNItqqE2iW53iGEH2btSMgcJ4h3DnFpRKnhq:sXHNsGeTHQpD+da6+2bqFtCxS+RUM
TLSH
2FE1D61D6E92A210EB23139E779F1594165CC583240EE844F14DECF8BF5BB6C8B53B45
1 malicious · 1 file
HTMbc3d766ca20b95fa50f9b8fab77e52a1T1027 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
html~T1027~T1059.007
Shape
html
technique1 nodes
JScript loader obfusque (emulation bloquee par anti-analyse)
WORDINGmalicious
obfuschuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential