Malicious
d1957d81b4afdb0ba7988a729b9080c8
JavaScript
MD5: d1957d81b4afdb0ba7988a729b9080c8
Size: 128.34 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 125.3 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- dffa283eb54f9df2783f31aca2758141868cd4ea478f612a641a5dbbf25737a0
- MD5
- d1957d81b4afdb0ba7988a729b9080c8
- Verdict
- Malicious
- File type
- JavaScript · 125.3 KB
Cite this report: https://app.malva.re/sha256/dffa283eb54f9df2783f31aca2758141868cd4ea478f612a641a5dbbf25737a0
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
128.34 KB · 128,344 B
First seen
2026-10-26 15:30 · 9 hours ago
Last seen
2026-10-26 15:30 · 9 hours ago
Last analysis
2026-10-26 15:30 · 9 hours ago
Hashes
MD5
d1957d81b4afdb0ba7988a729b9080c8
Sha1
0662beaa4a0819f673fed1f1a546331c79e388dc
Sha256
dffa283eb54f9df2783f31aca2758141868cd4ea478f612a641a5dbbf25737a0
Sha384
0786307aba40dce1b4b46eb8d655e1da99926e5177595f4534e63b5a48db2934dfba87792067fce3ae6f1fd168be7a84
Sha512
b995b4c04bee958adc048d2ca260afb0398dc9d4c314db2f8d416612b43e16457ad37e346d5864c664c25eb34b7c63c5b7753a0b134ceb70446cce4806c5f7d0
SSDeep
3072:UOXwArDwkhx1y1fFe65AYy7MwXdUYpZ7Ymx3OJdOYc0v+f2AN+Ztj7r7WZgYelCs:HrssLU7r7WhAKKt
TLSH
6BC38C282AE58108B0F3BA51FAB7E8651E17B7D27538514E368C170D9FB384ACC93739
1 malicious · 1 file
JSd1957d81b4afdb0ba7988a729b9080c8T1105 · T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007~T1105
Shape
scr:js
technique1 nodes
Dropped path (emulation JS) #1
PATHmalicious
\huhuhuhu
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
URLs in JS Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 1 file
JSd1957d81b4afdb0ba7988a729b9080c8T1105 · T1059.007
No malware configuration was found at this point.
Dropped path (emulation JS) #1
PATHmalicious
\huhuhuhu
d1957d81b4afdb0ba7988a729b9080c8
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
d1957d81b4afdb0ba7988a729b9080c8
URLs in JS Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
d1957d81b4afdb0ba7988a729b9080c8
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account