Open-source atomic malware analysis

Analyze another

0a4147397199392891d3bac4b8e40b97.js

JAVASCRIPT
Verdict: BENIGN
SHA256: 8afd2d4fbef7af6b1f3e24efe0036744aca42b6eb0df4d1f43d5271f3917ac3a
Mal-ecule
O(As)H(U₂)
Size 13.6 KB download
First seen 101 days ago
Analyzed 98 days ago

Objectives

notable severity, 85% confident.
anti-static/obfuscation/code-metrics Generated or transformed code
baseline severity, 80% confident.
anti-static/obfuscation Many comma sequence expressions (obfuscation)
baseline severity, 86% confident.
credential-access/cloud Regex component marker
baseline severity, 80% confident.
credential-access/financial Field filter returns true
baseline severity, 70% confident.
supply-chain/hidden-payload/extensions High ratio of single character function names
baseline severity, 100% confident.
supply-chain/trojanized/app Benign Svelte runtime dirty-check fragment update
component severity, 95% confident.
anti-analysis/timing Regex component marker
component severity, 95% confident.
anti-static/obfuscation/string Regex component marker
component severity, 94% confident.
command-and-control/infrastructure Regex component marker

Micro-behaviors

notable severity, 78% confident.
ui/graphics Uses animation frame callback
notable severity, 78% confident.
ui/window/manage References iframe DOM element
baseline severity, 90% confident.
communications/http HTTP protocol prefix
baseline severity, 90% confident.
data/encode/permutation Nested loops with multiple charAt calls
baseline severity, 90% confident.
data/source Prototype guard checks constructor
baseline severity, 100% confident.
data/source/syntax XOR bitwise operator in expression
baseline severity, 82% confident.
data/string JavaScript substring search call

Metadata

baseline severity, 85% confident.
file/text High function density
baseline severity, 100% confident.
lang new Promise() usage marker
baseline severity, 100% confident.
lang/encoded JavaScript file basename
baseline severity, 75% confident.
package/testing it() test call marker

20 of 34 traits shown

Identity

SHA-256 8afd2d4fbef7af6b1f3e24efe0036744aca42b6eb0df4d1f43d5271f3917ac3a
Filename 0a4147397199392891d3bac4b8e40b97.js

Origin

Source harvest

Timeline

First seen 21 May 2026 17:12 UTC
First analyzed 24 May 2026 13:22 UTC
Last analyzed 24 May 2026 13:22 UTC
Last updated 24 May 2026 13:22 UTC

Labeling

Label good
Label source harvest
Traits version 9ea7c