Open-source atomic malware analysis

Analyze another

8ab4ad12cde56e084f592358295811ac

JAVASCRIPT
Verdict: BENIGN
SHA256: 0f5876e46d309755c6735de6765d1da9379487375fcb42796aa27e24578c366c · 54%
Mal-ecule
O(As)H(U₂)
Size 46.2 KB download
First seen 89 days ago
Analyzed 78 days ago

Objectives

suspicious severity, 95% confident.
anti-static/obfuscation/tools Advanced array shuffling algorithm
component severity, 100% confident.
anti-static/obfuscation/code-metrics Benign context: high comment-to-code ratio (≥35%)
component severity, 100% confident.
anti-static/obfuscation/control-flow Detects retry loop wrapping try-catch (while loop)
component severity, 95% confident.
anti-static/obfuscation/encoding Many subtraction operators present
component severity, 100% confident.
anti-static/obfuscation/string Known JavaScript library source
component severity, 100% confident.
supply-chain/trojanized/library -api suffix

Micro-behaviors

notable severity, 78% confident.
ui/graphics Uses animation frame callback
notable severity, 82% confident.
ui/window/manage DOM element click call
baseline severity, 80% confident.
communications/ip Random number generation function call
baseline severity, 90% confident.
data/encode/permutation Nested for loops (control-flow building block)
baseline severity, 80% confident.
data/source Dot path splitting double quote
baseline severity, 70% confident.
data/source/syntax Function constructor keyword
baseline severity, 82% confident.
data/string JavaScript substring search call
component severity, 100% confident.
data/encode toString method token
component severity, 100% confident.
os/console JavaScript console object

Metadata

baseline severity, 90% confident.
encoded-payload Decoded unicode-escape content
baseline severity, 80% confident.
file/text Sequential source identifier names
baseline severity, 90% confident.
library Minified UMD AMD branch (reversed comparison)
baseline severity, 90% confident.
package Code has source map reference
component severity, 100% confident.
lang Plain JavaScript identifier assignment

20 of 38 traits shown

Identity

SHA-256 0f5876e46d309755c6735de6765d1da9379487375fcb42796aa27e24578c366c
Filename 8ab4ad12cde56e084f592358295811ac

Origin

Source harvest

Timeline

First seen 31 May 2026 22:57 UTC
First analyzed 12 Jun 2026 12:06 UTC
Last analyzed 12 Jun 2026 12:06 UTC
Last updated 12 Jun 2026 12:06 UTC

Labeling

Label bad
Label source harvest
Traits version e31a3