Malicious
Malicious

e486ea26627abde42ddc5bf8810a702c

Share on LinkedIn
Print
JavaScript
MD5: e486ea26627abde42ddc5bf8810a702c
Size: 4.3 KB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 4.2 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file and a malware configuration (URLs (emulation JS)). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
382e2bd0a1b1bf18cdf94438ec898450b05b12577e6f2f3579019518d0bb2f5a
MD5
e486ea26627abde42ddc5bf8810a702c
Verdict
Malicious
File type
JavaScript · 4.2 KB
MITRE ATT&CK
T1059.007T1105

Cite this report: https://app.malva.re/sha256/382e2bd0a1b1bf18cdf94438ec898450b05b12577e6f2f3579019518d0bb2f5a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Windows Script File (WSF)
Size
4.3 KB · 4,295 B
First seen
2026-10-28 14:00 · 7 hours ago
Last seen
2026-10-28 14:00 · 7 hours ago
Last analysis
2026-10-28 14:00 · 7 hours ago
Hashes
MD5 e486ea26627abde42ddc5bf8810a702c Sha1 f80c0734cb4f330ccb88a8ee3f34818b229a20e6 Sha256 382e2bd0a1b1bf18cdf94438ec898450b05b12577e6f2f3579019518d0bb2f5a Sha384 c9c8585bfd0eff69ad4dfe6d1c187b0d4b8a1ccc8414d2244a7d7ab854ab82d626313f5bb30fba2c9ac385b498485afb Sha512 4eb51d0579cb06e5ef50664818ca897c8101a64814e89caeb1b9339e5c552bf0a0cbf5d58544d12e2e89e4314c30cd40523b9967efa6ee5651569e4725608340 SSDeep 48:vtIbHqiesDrcWp7c3VXJW5POq5+Pp7r4QW3T+1QumgqNI4:vsqiJoI6lY5Pdo/4QC+1fm7Np TLSH 8191EC8D3D99A06C8972373C8F6B6A0CE736442B0512C668B59C96D05FB146846A9FFC

2 malicious · 2 files
JSe486ea26627abde42ddc5bf8810a702c
BIN[Job Id=No ID Name=No Name]
JS[JScript] #0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007~T1105
Shape scr:js
malicious 1 nodes

Config. Field Value
URL (emulation JS) #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

URLs in JS Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙