Malicious
Malicious

ef8a90d417dd70c0a844c3fca7531f30

HTML
MD5: ef8a90d417dd70c0a844c3fca7531f30
Size: 12.25 KB
text/html
Ctrl + scroll to zoom · drag to pan

This sample is a 12 KB HTML classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
8cc8bf1f64417890f7d4ebd7bce8ef55fbe724a70d8de9355bf027c92380c8eb
MD5
ef8a90d417dd70c0a844c3fca7531f30
Verdict
Malicious
File type
HTML · 12 KB
MITRE ATT&CK
T1027T1059.007

Cite this report: https://app.malva.re/sha256/8cc8bf1f64417890f7d4ebd7bce8ef55fbe724a70d8de9355bf027c92380c8eb

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
HTML file
Size
12.25 KB · 12,253 B
First seen
2026-10-31 17:00 · 17 hours ago
Last seen
2026-10-31 17:00 · 17 hours ago
Last analysis
2026-10-31 17:00 · 17 hours ago
Hashes
MD5 ef8a90d417dd70c0a844c3fca7531f30 Sha1 26893321179940a4c88b4bc2152dc562bb7f0abe Sha256 8cc8bf1f64417890f7d4ebd7bce8ef55fbe724a70d8de9355bf027c92380c8eb Sha384 b1bb151b376f8a98a6731b6e5710a0d788cddf6b2d542f6005ff5a155816f5cbef04f523500ed9db186b72e1b1e0e2ce Sha512 867fe0837c1537293e66dcf12ee75320f409da56ac2362195e328ee5f27d22ef2f3ba0b0abc332961f3a367a64151cad55024695dae4aee20b937f5b1ea2918a SSDeep 192:sWHNsGeTHQpD+da6+888+UV7tDoj/pxzAbqFtCQSpRUzHM:sWX+/DV7k/3LFtkRUzHM TLSH 10422A5CAEE1A1B0EB0707DEB3AF24690268A0C72409C484F54CDEE87F46BDD4A57B57

1 malicious · 3 files
HTMef8a90d417dd70c0a844c3fca7531f30
IMG0x0000084E.svg
IMG0x0000084E.svg-preview.jpg
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path html~T1027~T1059.007>img
Shape html>img
technique2 nodes

JScript loader obfusque (emulation bloquee par anti-analyse) WORDINGmalicious
obfuschuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 3 files
HTMef8a90d417dd70c0a844c3fca7531f30
No malware configuration was found at this point.

JScript loader obfusque (emulation bloquee par anti-analyse) WORDINGmalicious
obfuschuhuhuhuhuhuhuhuhuhuhu
ef8a90d417dd70c0a844c3fca7531f30
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙