Suspect
d0e0a9b05057acd27581271d60737bf2
JavaScript
MD5: d0e0a9b05057acd27581271d60737bf2
Size: 4.69 MB
application/javascript
This sample is a 4.5 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 21 embedded or derived files. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 6a93861d9d3604a31a32485a317d5056b54b530588fdebe935b6e23d85272de7
- MD5
- d0e0a9b05057acd27581271d60737bf2
- Verdict
- Inconclusive
- File type
- JavaScript · 4.5 MB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/6a93861d9d3604a31a32485a317d5056b54b530588fdebe935b6e23d85272de7
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript (reclassé : grammaire non-VBScript)
Size
4.69 MB · 4,689,920 B
First seen
2026-09-30 13:45 · 28 days ago
Last seen
2026-09-30 13:45 · 28 days ago
Last analysis
2026-09-30 13:45 · 28 days ago
Hashes
MD5
d0e0a9b05057acd27581271d60737bf2
Sha1
80ab0fd32d5e8e4163e8bd123e40954a5d0662e6
Sha256
6a93861d9d3604a31a32485a317d5056b54b530588fdebe935b6e23d85272de7
Sha384
6afe2898b0511403090729cf3c34b49da8556743d1bd480b49fbe50b74a495f729664300a9468fd19f2c96ed8cc86f92
Sha512
a928ff9ad2f9f844a3a0946067349c41dcaae685d422444a5f11308e7a17d4199c356064042496406bfbeb84d709a5001f7b109587748a198802c977874d9716
SSDeep
49152:EXMSl5PFohgS9f4Bbo9W+MtwkGPFX30maeYNB4YVPRqLC:Etuesf49o+x+FX30DBmL
TLSH
1826B7F2450B96ACD7BBC5B4407D953A71324E2A53438EE2BDCC7D34AF6AE82F015216
22 files
JSd0e0a9b05057acd27581271d60737bf2T1059.007
IMG12
IMG12-preview.png
EXEOpen 6143092225.exe
Structure
P7B[Authenticode]_ac5f892b.p7b
DLLmfc140u.dllT1059.007
Structure
BINOverlay_1597a6aa.bin
BIN(folder)
BIN4
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
IMGID:1033
IMGID:1033-preview.png
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINRT_DIALOG
BINID:0004
BINID:2052
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
5 / 5
Path
scr:js~T1059.007>pe:dll~T1059.007>pe:rsrc>img
Shape
scr:js>pe:dll>pe:rsrc>img
technique4 nodes
Path
scr:js~T1059.007>pe:dll~T1059.007>pe:rsrc>bin
Shape
scr:js>pe:dll>pe:rsrc>bin
technique4 nodes
22 files
JSd0e0a9b05057acd27581271d60737bf2T1059.007
IMG12
EXEOpen 6143092225.exe
DLLmfc140u.dllT1059.007
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account