09ebed8e884e77f7a9a10c18b392d4bc767281b48c946fb50bfeb419dfabb589.js

JAVASCRIPT

SUSPICIOUS

Mal-ecule

Size 5.5 KB download

First seen 96 days ago

Analyzed 77 days ago

Objectives

anti-static/obfuscation/tools while(!![]) try/parseInt decoder loop

supply-chain/hidden-payload a0_0x JavaScript string decoder entrypoint

anti-static/obfuscation/code-metrics High ratio of digit characters (junk padding)

anti-static/obfuscation/control-flow Detects retry loop wrapping try-catch (while loop)

command-and-control/dropper/lnk ShellLink local base path offset

execution/interpreter/script String.fromCharCode fragment (CharCode)

persistence/login/ssh JavaScript Windows drive enumeration marker

process/interpreter/scripting JScript conditional compilation activation

data/encode/permutation Nested loops with multiple charAt calls

data/source/syntax Obfuscated String method call (String[...])

crypto/symmetric/aes JavaScript static key string assignment

data/encode toString method token

process/create/shell Indirect bracketed WScript command invocation

lang JavaScript or TypeScript basename

file/text Validation vocabulary string

lang/encoded JavaScript file basename

package Short sidecar-sized source

SHA-256	09ebed8e884e77f7a9a10c18b392d4bc767281b48c946fb50bfeb419dfabb589
Filename	09ebed8e884e77f7a9a10c18b392d4bc767281b48c946fb50bfeb419dfabb589.js

Source	harvest

Not seeing what you expected? Let us know