v1.95.8.index.browser.esm.js

JAVASCRIPT

HOSTILE

Mal-ecule

Size 314.1 KB download

First seen 117 days ago

Analyzed 117 days ago

Ecosystem malcontent-samples

Objectives

command-and-control/infrastructure/blockchain Fetches payload from Solana program accounts

credential-access/wallet Solana SOL fund transfer from stolen key

anti-static/obfuscation/eval Usage of Buffer.from(..., 'hex') for decoding

anti-static/obfuscation/string Function call with hex string argument

supply-chain/trojanized Obfuscated code drops or decodes payload

anti-static/obfuscation/code-metrics Very long lines (>1000 chars)

supply-chain/hidden-payload Explicit source map marker in bundled output

anti-analysis/timing Triple Date/Time retrieval (raw)

anti-static/obfuscation JavaScript/TypeScript file extension

communications/http Solana mainnet-beta RPC endpoint

data/encode Nested hex and base64 decode

data/text Solana SystemProgram fund transfer

data/control-flow Infinite loop structure (e.g. for(;;) or while(1))

data/decode Base64 decoding via Buffer.from (JS)

data/source/syntax Function constructor keyword

import imports import

lang Code uses new Promise

lang/encoded JavaScript file basename

library Large bundled JavaScript module graph

package Package references HISTORY

20 of 28 traits shown

SHA-256	4638524273c19f4ecbda2a9dfe96d0c334474c87fb70304b370218dcc272abdf
Filename	v1.95.8.index.browser.esm.js

Not seeing what you expected? Let us know