Local reference
Suspicious dependency
Inferred
Mal-ecule
O(C)H(U)
Objectives
notable severity, 85% confident.
command-and-control/dropper/delivery
HTML creates object URL
baseline severity, 86% confident.
credential-access/cloud
Regex component marker
component severity, 90% confident.
anti-static/obfuscation/payload
JavaScript function keyword in non-code file
component severity, 90% confident.
execution/lure
Regex component marker
component severity, 70% confident.
impact/ui
DOM write API innerHTML or appendChild
Micro-behaviors
notable severity, 82% confident.
ui/window/manage
DOM element click call
baseline severity, 84% confident.
process/create/shell
Right string trimming
component severity, 88% confident.
data/format
Hides element with display none
Metadata
baseline severity, 90% confident.
document
HTML5 document doctype
baseline severity, 100% confident.
lang
javascript code embedded in string
component severity, 70% confident.
file/text
JavaScript file under 5KB
Identity
| SHA-256 | 6b114a62b2c0151b7b89f838bfbd0b6da0d0fab396d07c0737574d36a4b54b30 |
|---|---|
| Filename | misc_exporter_ply.html |
Origin
| Source | cyclotron |
|---|
Timeline
| First seen | 25 May 2026 21:41 UTC |
|---|---|
| First analyzed | 25 May 2026 22:58 UTC |
| Last analyzed | 25 May 2026 22:58 UTC |
| Last updated | 2 Jun 2026 21:24 UTC |
Labeling
| Label | good |
|---|---|
| Label source | cyclotron |
| Traits version | 60d49 |
Not seeing what you expected? Let us know