Open-source atomic malware analysis

Analyze another

VirusShare_65000433b4b79b0ad398684811855c7b

JAVASCRIPT
Verdict: SUSPICIOUS
SHA256: 938ce9e5da281248e321193b4cb50b380383feacbda7aac2e5d0617b2c83eaf7
Mal-ecule
O₂(AlCa)H(Cm)
Size 642 B download
First seen 95 days ago
Analyzed 94 days ago

Objectives

suspicious severity, 90% confident.
anti-analysis/analysis-bomb Rule evaluation timeout: objectives/impact/cryptojacking/miner/smart::mining-pool-xmr took 30921ms (limit: 30000ms)
suspicious severity, 70% confident.
credential-access/phishing Meta refresh redirect to external URL
component severity, 82% confident.
collection/stealer Programmatically submits form
component severity, 86% confident.
credential-access/cloud Regex component marker
component severity, 90% confident.
credential-access/email/webmail Regex component marker
component severity, 92% confident.
execution/interpreter/scripting "crip" fragment of split WScript.Shell
component severity, 90% confident.
supply-chain/hidden-payload Tiny JavaScript sidecar loader
component severity, 90% confident.
supply-chain/hidden-payload/extensions Regex component marker
component severity, 70% confident.
supply-chain/metadata-anomaly/package Small file under 5KB

Micro-behaviors

notable severity, 75% confident.
communications/http Reads browser User-Agent string

Metadata

component severity, 80% confident.
file/text Very short file (under 12 lines)
component severity, 80% confident.
package Short sidecar-sized source

Identity

SHA-256 938ce9e5da281248e321193b4cb50b380383feacbda7aac2e5d0617b2c83eaf7
Filename VirusShare_65000433b4b79b0ad398684811855c7b

Origin

Source harvest

Timeline

First seen 12 May 2026 19:03 UTC
First analyzed 14 May 2026 10:37 UTC
Last analyzed 14 May 2026 10:37 UTC
Last updated 14 May 2026 10:37 UTC

Labeling

Label bad
Label source harvest
Traits version 1f252