Open-source atomic malware analysis

Analyze another

e4efa5a876b1ea921aa1478d98b1057b.js

JAVASCRIPT
Verdict: BENIGN
SHA256: 5d04803518161b5da82e8d5da4e8f083beccf28a6218a4121ba0c9dd10b678a6
Mal-ecule
O(As)H(U₂)
Size 47.8 KB download
First seen 101 days ago
Analyzed 98 days ago

Objectives

notable severity, 85% confident.
anti-static/obfuscation/code-metrics Generated or transformed code
baseline severity, 80% confident.
anti-static/obfuscation Many comma sequence expressions (obfuscation)
baseline severity, 80% confident.
credential-access/financial Field filter returns true
baseline severity, 70% confident.
supply-chain/hidden-payload/extensions High ratio of single character function names
component severity, 95% confident.
anti-static/obfuscation/string Regex component marker

Micro-behaviors

notable severity, 78% confident.
ui/graphics Uses animation frame callback
notable severity, 78% confident.
ui/window/manage References iframe DOM element
baseline severity, 90% confident.
communications/http HTTPS protocol prefix
baseline severity, 70% confident.
data/encode URL-encodes data via encodeURIComponent
baseline severity, 90% confident.
data/encode/permutation Nested loops with multiple charAt calls
baseline severity, 90% confident.
data/source Prototype guard checks constructor
baseline severity, 82% confident.
data/string JavaScript substring search call
component severity, 100% confident.
data/text/keywords "Environment" keyword
component severity, 100% confident.
os/console JavaScript console object

Metadata

baseline severity, 85% confident.
file/text High function density
baseline severity, 95% confident.
import imports import
baseline severity, 95% confident.
lang JavaScript or TypeScript basename
baseline severity, 100% confident.
lang/encoded JavaScript file basename
baseline severity, 75% confident.
package/testing it() test call marker
component severity, 96% confident.
package/testing/harness Regex component marker

20 of 37 traits shown

Identity

SHA-256 5d04803518161b5da82e8d5da4e8f083beccf28a6218a4121ba0c9dd10b678a6
Filename e4efa5a876b1ea921aa1478d98b1057b.js

Origin

Source harvest

Timeline

First seen 21 May 2026 17:12 UTC
First analyzed 24 May 2026 09:07 UTC
Last analyzed 24 May 2026 09:07 UTC
Last updated 24 May 2026 09:07 UTC

Labeling

Label good
Label source harvest
Traits version 9ea7c