Malicious
Malicious

f5d3fcb8a8a7a5f74cef3765a3c2f3ed

Share on LinkedIn
Print
JavaScript
MD5: f5d3fcb8a8a7a5f74cef3765a3c2f3ed
Size: 6.11 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 5.8 MB JavaScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
bdb0561ed3d706047ca75809e2ef7754cd36d99b40856d044b8c1174ba657f7f
MD5
f5d3fcb8a8a7a5f74cef3765a3c2f3ed
Verdict
Malicious
File type
JavaScript · 5.8 MB

Cite this report: https://app.malva.re/sha256/bdb0561ed3d706047ca75809e2ef7754cd36d99b40856d044b8c1174ba657f7f

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
JavaScript file
Size
6.11 MB · 6,108,954 B
First seen
2026-10-27 16:15 · 5 days ago
Last seen
2026-10-27 16:15 · 5 days ago
Last analysis
2026-10-27 16:15 · 5 days ago
Hashes
MD5 f5d3fcb8a8a7a5f74cef3765a3c2f3ed Sha1 7e006d030d01f09c7ec12e489781b59d790f3936 Sha256 bdb0561ed3d706047ca75809e2ef7754cd36d99b40856d044b8c1174ba657f7f Sha384 ad08b1b546735bb1b39889860f4e3c11d0e10157c976ed710cadc864ab9c4853492ac504bdbd3219d8c8aa17ecdbc291 Sha512 ec072a585a602a3111863f6ff056525a2498335602d0f2f00f84b081cf1f04f8a18659fb705608279de941146cf80fe37cc5b983f7f923c4988135aff3b95077 SSDeep 98304:R3eIIaQCz1hKrsBd2Cj6DKFNxZR90tIy3Dc7kYfsZSGPrIHMYOelnjMhFOq0AWCI:NM99hssPJXe3udq96aEuHfDk9wQCAH5s TLSH 2D567D490357E6C2B0EC3A18C91AEEE57A1D644BAF61DE39763C95AF9748E03330C761

4 malicious · 4 files
JSf5d3fcb8a8a7a5f74cef3765a3c2f3ed
BINf5d3fcb8a8a7a5f74cef3765a3c2f3ed.emulated
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:js>scr:bat>scr:ps1
malicious 3 nodes

Command (emulation JS) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Command (emulation JS) #2 UNKNWOWNmalicious
\WVLOXhuhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
ehuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙