Malicious
Malicious

c7148b9a1e845a314004ff7f5cb65823

JavaScript
MD5: c7148b9a1e845a314004ff7f5cb65823
Size: 3.05 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 2.9 MB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
078588ba9d4020c691da2d3424b910251062837a70b912e5f9054b03b16b2ab8
MD5
c7148b9a1e845a314004ff7f5cb65823
Verdict
Malicious
File type
JavaScript · 2.9 MB
MITRE ATT&CK
T1059.007T1105

Cite this report: https://app.malva.re/sha256/078588ba9d4020c691da2d3424b910251062837a70b912e5f9054b03b16b2ab8

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
3.05 MB · 3,047,047 B
Hashes
MD5 c7148b9a1e845a314004ff7f5cb65823 Sha1 ea398693d2fab1da5f33c270e8d50f8d214e797b Sha256 078588ba9d4020c691da2d3424b910251062837a70b912e5f9054b03b16b2ab8 Sha384 66d3536008c8932b104d91c28aaca2f8dd16ba9996d7922c6ac6cfaf0c71e4e5f7e79cd12780397335382223d4491c51 Sha512 4e7297c426fdb4581d6071200489a704de2fb19add9cf50bb30e01cadfe548c02015126d25441f2eb11361c42888f639f8975d4d812437a833f850a3d10b18da SSDeep 49152:j62aF+a1ZvdLlW2dIdNxck7D+TiUrQytGev/2qImJFU/aqgVns8TY9Ut1UydWW6i:j62aF+a1ZvdLA2dIdNxck7aTiUsyEevj TLSH 3AE5872FC6286F1D36E61DCE5E96C2D8A6CFD909C04C4ED37652B951E3348E9C7893A0

1 malicious · 1 file
JSc7148b9a1e845a314004ff7f5cb65823
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007~T1105
Shape scr:js
technique1 nodes

Dropped path (emulation JS) #1 PATHmalicious
\LPXPHhuhuhuhuhuhuhuhuhuhuhu
Dropped path (emulation JS) #2 PATHmalicious
\LPXPHhuhuhuhuhuhuhuhuhuhuhu
Dropped path (emulation JS) #3 PATHmalicious
\LPXPHhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 1 file
JSc7148b9a1e845a314004ff7f5cb65823
No malware configuration was found at this point.

Dropped path (emulation JS) #1 PATHmalicious
\LPXPHhuhuhuhuhuhuhuhuhuhuhu
c7148b9a1e845a314004ff7f5cb65823
Dropped path (emulation JS) #2 PATHmalicious
\LPXPHhuhuhuhuhuhuhuhuhuhuhu
c7148b9a1e845a314004ff7f5cb65823
Dropped path (emulation JS) #3 PATHmalicious
\LPXPHhuhuhuhuhuhuhuhuhuhuhu
c7148b9a1e845a314004ff7f5cb65823
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
c7148b9a1e845a314004ff7f5cb65823
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙