Open-source atomic malware analysis

Analyze another

hydrolysis 1.25.0

UNKNOWN
Verdict: BENIGN
SHA256: 8342920fcff54ce9f7cd292f235dfbd500bed398cd8db71ea7b3e0faf646b2ae
Mal-ecule
O(La)H₅(Cm₄Db₃F₃Os₂Po₂)Md₃(Pa₄)
Size 1007.3 KB download unavailable
First seen 1 day ago
Analyzed 1 day ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 1 sample

Objectives

notable severity, 86% confident.
lateral-movement/brute-force Embeds multiple default credential pairs

Micro-behaviors

notable severity, 80% confident.
communications/http/client Opens an XMLHttpRequest connection
notable severity, 86% confident.
communications/http/url GitHub web raw file URL
notable severity, 85% confident.
communications/ipc Registers window or worker message listener
notable severity, 92% confident.
data/control-flow CommonJS module re-exports required package
notable severity, 95% confident.
data/decode Inline alphabet-table index lookup
notable severity, 90% confident.
fs/file Reads files with Node.js
notable severity, 80% confident.
fs/path Hardcoded absolute home directory path
notable severity, 90% confident.
os/network Reference to a UNC network share path
notable severity, 90% confident.
process/create/load CommonJS side-effect-only require
notable severity, 90% confident.
process/create/shell References a shell executable

Metadata

notable severity, 90% confident.
encoded-payload Encoded payload detected: base64
notable severity, 100% confident.
file/format JavaScript source map
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 100% confident.
package/quality References MDN documentation for Date.prototype

20 of 28 traits shown

Identity

SHA-256 8342920fcff54ce9f7cd292f235dfbd500bed398cd8db71ea7b3e0faf646b2ae
Canonical SHA-256 06f46b8977f81fb1c99f62bbd458267e6a59e71fc9ece65fcec3ea3e24fca625
Filename hydrolysis-1.25.0.tgz
Package hydrolysis
Version 1.25.0
PURL pkg:npm/[email protected]

Origin

Source upload
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/hydrolysis/-/hydrolysis-1.25.0.tgz

Timeline

First seen 5 Aug 2026 17:21 UTC
First analyzed 5 Aug 2026 17:23 UTC
Last analyzed 5 Aug 2026 17:23 UTC
Last updated 5 Aug 2026 17:21 UTC

Labeling

Label unknown
Label source upload
Traits version b5ca8