eb6a0e9add3c096ffd96cf3a0dd7e56e

JavaScript

MD5: eb6a0e9add3c096ffd96cf3a0dd7e56e

Size: 4.05 MB

application/javascript

Ctrl + scroll to zoom · drag to pan

This sample is a 3.9 MB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 5 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 0498c065bd34f05a419f24b1e973fb44917833fe76845c3dd66aadd6ebe9ed41
MD5: eb6a0e9add3c096ffd96cf3a0dd7e56e
Verdict: Malicious
File type: JavaScript · 3.9 MB
MITRE ATT&CK: T1027 T1059.007 T1105

Cite this report: https://app.malva.re/sha256/0498c065bd34f05a419f24b1e973fb44917833fe76845c3dd66aadd6ebe9ed41

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

JavaScript file

Size

4.05 MB · 4,046,906 B

First seen

2026-10-26 07:45 · 6 hours ago

Last seen

2026-10-26 07:45 · 6 hours ago

Last analysis

2026-10-26 07:46 · 6 hours ago

Hashes

MD5 eb6a0e9add3c096ffd96cf3a0dd7e56e Sha1 4b8989f6c5fbbe4d4fa9e7199bdfac26ce1955d3 Sha256 0498c065bd34f05a419f24b1e973fb44917833fe76845c3dd66aadd6ebe9ed41 Sha384 40f969056957ac1ffd3870f7787ca640fe9f5c5efa931a229de6a85c02b6e48ccf0fcd5ca7f660133c0d1db693d991ec Sha512 aebc61e29f3039e378d76d7eeddef215d3cb5ffaa5adef675320fe23507f02e7cc86ee251602d17d6c597f4dd5af38b23f313ef08858572315deef7906fab4a3 SSDeep 24576:Ecz8gvT0eDfMQyhh7oy1+bTl5AqqxFMXYNvZLjU1V+CZJLYmKBwkxjd/bGyXYFoT:u TLSH C9163374EDB385598AE9C792D2A2A1E4466E608A1B1CEC39D41F412D1CF3FDBC8441EF

2 malicious · 2 files

JSeb6a0e9add3c096ffd96cf3a0dd7e56e

BINeb6a0e9add3c096ffd96cf3a0dd7e56e.emulated

JS[Stage #1].js

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:js~T1027~T1059.007~T1105

Shape scr:js

malicious 1 nodes

Command (emulation JS) #1 UNKNWOWNmalicious

"\JJIOhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #1 PATHmalicious

\JJIOChuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #2 PATHmalicious

\JJIOChuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #3 PATHmalicious

\JJIOChuhuhuhuhuhuhuhuhuhuhu

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious

#? evhuhuhuhuhuhuhuhuhuhuhu

Command (emulation JS) #1 UNKNWOWNmalicious

"\NULBhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #1 PATHmalicious

\NULBBhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #2 PATHmalicious

\NULBBhuhuhuhuhuhuhuhuhuhuhu

Dropped path (emulation JS) #3 PATHmalicious

\NULBBhuhuhuhuhuhuhuhuhuhuhu

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious

#? nehuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

2 malicious · 2 files

JSeb6a0e9add3c096ffd96cf3a0dd7e56e

BINeb6a0e9add3c096ffd96cf3a0dd7e56e.emulated

JS[Stage #1].js

No malware configuration was found at this point.

Command (emulation JS) #1 UNKNWOWNmalicious

"\JJIOhuhuhuhuhuhuhuhuhuhuhu

eb6a0e9add3c096ffd96cf3a0dd7e56e

Dropped path (emulation JS) #1 PATHmalicious

\JJIOChuhuhuhuhuhuhuhuhuhuhu

eb6a0e9add3c096ffd96cf3a0dd7e56e

Dropped path (emulation JS) #2 PATHmalicious

\JJIOChuhuhuhuhuhuhuhuhuhuhu

eb6a0e9add3c096ffd96cf3a0dd7e56e

Dropped path (emulation JS) #3 PATHmalicious

\JJIOChuhuhuhuhuhuhuhuhuhuhu

eb6a0e9add3c096ffd96cf3a0dd7e56e

Trace d'emulation JS (ordonnee) UNKNWOWNmalicious

#? evhuhuhuhuhuhuhuhuhuhuhu

eb6a0e9add3c096ffd96cf3a0dd7e56e

Command (emulation JS) #1 UNKNWOWNmalicious

"\NULBhuhuhuhuhuhuhuhuhuhuhu