Malicious
JavaScript
MD5: e8bcf3eb1cc161ca0a92cd6f687eb0cc
Size: 391.84 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 382.7 KB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 94ab14ed7de4a71b27dfb15e3851cf23f7b5a604ef2990bbeadcdf67e067beb3
- MD5
- e8bcf3eb1cc161ca0a92cd6f687eb0cc
- Verdict
- Malicious
- File type
- JavaScript · 382.7 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/94ab14ed7de4a71b27dfb15e3851cf23f7b5a604ef2990bbeadcdf67e067beb3
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
391.84 KB · 391,840 B
First seen
2026-10-28 10:45 · 4 days ago
Last seen
2026-10-28 10:45 · 4 days ago
Last analysis
2026-10-28 10:45 · 4 days ago
Hashes
MD5
e8bcf3eb1cc161ca0a92cd6f687eb0cc
Sha1
b02dd18b55df988a08549790edeae73ddde0a0d9
Sha256
94ab14ed7de4a71b27dfb15e3851cf23f7b5a604ef2990bbeadcdf67e067beb3
Sha384
276a5abb978046d02e6be2290c3821bb1f967c6e08f4d674d4815b8266174753e3370f3839dfd6d3882305c97c34ec4f
Sha512
340773290cd405cd409375f1a9d3eb5d39fdc75dee67cb2956139ca8fc63af33683da9989302136a0d96b71fed1bcb3ecab90a4f3d1edac14ea1b3f6318e6885
SSDeep
3072:EojxJN1y5DPEE6oWu4+1VggP9Hxu91lZYd:kEE6jG
TLSH
F3841A602CEF10DC7273AB511BD8B8FF0956F4762A3E61B821529B454B36EC4DCA2B71
1 malicious · 1 file
JSe8bcf3eb1cc161ca0a92cd6f687eb0ccT1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007
Shape
scr:js
technique1 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential