Malicious
JavaScript
MD5: fe912c6123875b079b4010eae2d7bc39
Size: 134.03 KB
application/javascript
Ctrl + scroll to zoom · drag to pan
This sample is a 130.9 KB JavaScript classified as malicious by Malva.RE. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 22becf7fbbfbb3985b7d3d4e2d37a40e75b7d2b285ec9bf0c01106b875cf398f
- MD5
- fe912c6123875b079b4010eae2d7bc39
- Verdict
- Malicious
- File type
- JavaScript · 130.9 KB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/22becf7fbbfbb3985b7d3d4e2d37a40e75b7d2b285ec9bf0c01106b875cf398f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
JavaScript file
Size
134.03 KB · 134,030 B
First seen
2026-11-02 07:15 · 2 hours ago
Last seen
2026-11-02 07:15 · 2 hours ago
Last analysis
2026-11-02 07:15 · 2 hours ago
Hashes
MD5
fe912c6123875b079b4010eae2d7bc39
Sha1
e738e252f77de83ac371d473d8ef81d0452445e6
Sha256
22becf7fbbfbb3985b7d3d4e2d37a40e75b7d2b285ec9bf0c01106b875cf398f
Sha384
cfc70d5211665152a6e76915f5b8f46a92fe953d84007f5d52ec702b89e8dbdf8a6fae7476a5b9e783f5506a4a8d2dbe
Sha512
3d749e229e8fd86679e8162e595c60f2ad1ab28d081767c991023622f0f8acace961dd01348b514a37621e8dbe1cc48b421598c5e6cffa30950c8aa3e3a7a8a9
SSDeep
3072:apTkxBjq09S9kkb8rHgcMnKBPHyJWP+nzroDWfiZCSB6yRLQm3LZlTRa82leiRYm:DdMJwjpo
TLSH
D8D38C051E9A984874B76B0987A258B14BFBBAD9F539434E214C771B17738088CDBFE3
1 malicious · 1 file
JSfe912c6123875b079b4010eae2d7bc39T1059.007
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:js~T1059.007
Shape
scr:js
technique1 nodes
Trace d'emulation JS (ordonnee)
UNKNWOWNmalicious
#? nehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential