Malicious
Malicious

f7ef5a39fe44cb3ec703f9a02782d6e0

JavaScript
MD5: f7ef5a39fe44cb3ec703f9a02782d6e0
Size: 4.48 KB
application/javascript
Ctrl + scroll to zoom · drag to pan

This sample is a 4.4 KB JavaScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file and a malware configuration (URLs (emulation JS)). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
ba90978bc50304ef9c6da938a7385852299e59fc160c02f9d24db8007da68b95
MD5
f7ef5a39fe44cb3ec703f9a02782d6e0
Verdict
Malicious
File type
JavaScript · 4.4 KB
MITRE ATT&CK
T1059.007T1105

Cite this report: https://app.malva.re/sha256/ba90978bc50304ef9c6da938a7385852299e59fc160c02f9d24db8007da68b95

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Windows Script File (WSF)
Size
4.48 KB · 4,483 B
First seen
2026-11-03 07:00 · 10 hours ago
Last seen
2026-11-03 07:00 · 10 hours ago
Last analysis
2026-11-03 07:00 · 10 hours ago
Hashes
MD5 f7ef5a39fe44cb3ec703f9a02782d6e0 Sha1 6f87fae383f12a20a1d760a94d0b3c53026f9a3c Sha256 ba90978bc50304ef9c6da938a7385852299e59fc160c02f9d24db8007da68b95 Sha384 ff4ab13fe5bc9b4bcc468b0889e637fc9c3abb6fa561540128e581272ebe7903aebf52398840bad3eead0b3af8bcb9c0 Sha512 e085aeec132f19b7b7dce87a6e5a1c830c8f8f0bf154071eb0c3924542941ae2fba8366cc4c48bdfd3e81a528c7f5f2edbaf012836c1f86d9ebedbcb586772a1 SSDeep 96:9i5PuYiHgVgBaLYBz/velIdPYoSlY9awJ:9iygHLwHPlYTlEas TLSH B091DE8EBD8EA0694A737338CB7F9108FA774923054AC604FD9CA6511F7141486B8EFD

2 malicious · 2 files
JSf7ef5a39fe44cb3ec703f9a02782d6e0
BIN[Job Id=No ID Name=No Name]
JS[JScript] #0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:js~T1059.007~T1105
Shape scr:js
malicious 1 nodes

Config. Field Value
URL (emulation JS) #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

URLs in JS Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
JSf7ef5a39fe44cb3ec703f9a02782d6e0
BIN[Job Id=No ID Name=No Name]
JS[JScript] #0

Config. Field Value
URL (emulation JS) #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

URLs in JS Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
f7ef5a39fe44cb3ec703f9a02782d6e0
Trace d'emulation JS (ordonnee) UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
f7ef5a39fe44cb3ec703f9a02782d6e0 › [Job Id=No ID Name=No Name] › [JScript] #0
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙