Open-source atomic malware analysis

Analyze another

incumbent.sub.html

HTML
Verdict: HOSTILE
SHA256: 05b8b9930de145f79bb7f04b6542392c0a0ab9f2457d242f585b252b9f78c0dc
Mal-ecule
O(C)H(U)
Size 840 B download
First seen 88 days ago
Analyzed 88 days ago

Objectives

notable severity, 85% confident.
command-and-control/dropper/delivery HTML creates object URL
baseline severity, 86% confident.
credential-access/cloud Regex component marker

Micro-behaviors

notable severity, 78% confident.
ui/window/manage References iframe DOM element

Metadata

baseline severity, 90% confident.
document HTML5 document doctype
baseline severity, 100% confident.
lang javascript code embedded in string
component severity, 70% confident.
file/text JavaScript file under 5KB

Identity

SHA-256 05b8b9930de145f79bb7f04b6542392c0a0ab9f2457d242f585b252b9f78c0dc
Filename incumbent.sub.html

Origin

Source cyclotron

Timeline

First seen 25 May 2026 21:41 UTC
First analyzed 25 May 2026 23:11 UTC
Last analyzed 25 May 2026 23:11 UTC
Last updated 2 Jun 2026 21:06 UTC

Labeling

Label good
Label source cyclotron
Traits version 60d49