Malicious
JavaScript
MD5: f4e374153b6ab10329c7e6892fa98cd9
Size: 3.59 MB
application/javascript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript (reclassé : grammaire non-VBScript)
Size
3.59 MB · 3,593,728 B
First seen
2026-10-25 09:30 · 13 hours ago
Last seen
2026-10-25 09:30 · 13 hours ago
Last analysis
2026-10-25 09:30 · 13 hours ago
Hashes
MD5
f4e374153b6ab10329c7e6892fa98cd9
Sha1
09ed8e47421a624f2240aa649573067fe98559c3
Sha256
4aa839afcacb1ae8a4c02adb62feaabe993329ee77c4aa1879f455bbde57ff81
Sha384
1480e5cd74afe12a4907e1d61bd71154aafa26807c3d0713aeb011a5345365ff1e9a23696c47464bdf6899aeb5a12e6f
Sha512
f8427e855c6c4627868101b10d9472ac6df35501d5de99fe9ff46b3691793ba7c7d66f827962a98cdfd59df44bd1c3eba0430826cc142a17aba2d8f66391b2c0
SSDeep
98304:8CIMjFhSKOXOVNCaW6VoSyN7zbnn7Syc:8CIMjFhUXKNdBvELQ
TLSH
D2F533A496B47D6B960043F8FF02885B5EF7E4A558CBDC0ACE1726368E1374B8045CBE
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPX -> www.upx.sourceforge.netUPX 2.93 - 3.95 (LZMA) ASL sign UPX 3.02UPX v3.0UPX v3.0 (EXE_LZMA) -> Markus Oberhumer & Laszlo Molnar & John ReiserUPolyX 0.3 -> delikon
2 malicious · 2 files
JSf4e374153b6ab10329c7e6892fa98cd9T1027 · T1055 · T1059.007Go Loader (Factory-v3)
Structure
EXE[UPX unpacked Lzma].exeT1027 · T1055Go Loader (Factory-v3)
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055~T1059.007
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| UPX | UPX method: Lzma, filter: X86CallJumpBe |
| UPX | |