Open-source atomic malware analysis

Analyze another

d696aee3132d899608adbd0dafcd0d0f.js

JAVASCRIPT
Verdict: BENIGN
SHA256: a065fabdc9612feff4e685f6c81b88b9dd37fe11c4f53a2cc80a13ad02d149ae
Mal-ecule
H(Cm)Md(Bi)
Size 810.7 KB download unavailable
First seen 69 days ago
Analyzed 66 days ago

Objectives

baseline severity, 80% confident.
anti-static/obfuscation Many comma sequence expressions (obfuscation)
baseline severity, 90% confident.
anti-static/obfuscation/code-metrics Minified/compressed code (multiple indicators)
baseline severity, 80% confident.
credential-access/financial Field filter returns true
baseline severity, 80% confident.
impact/ui Assigns CSS mime type
baseline severity, 70% confident.
supply-chain/hidden-payload/extensions High ratio of single character function names
component severity, 100% confident.
anti-analysis/timing Triple Date/Time retrieval (raw)
component severity, 100% confident.
anti-static/obfuscation/string JavaScript image data URI

Micro-behaviors

notable severity, 70% confident.
communications/http Reads URL query string via window.location.search
baseline severity, 70% confident.
data Writing data to buffer at calculated offset
baseline severity, 100% confident.
data/control-flow Infinite loop structure (e.g. for(;;) or while(1))
baseline severity, 70% confident.
data/encode URL-encodes data via encodeURI
baseline severity, 90% confident.
data/source Prototype guard keyword
baseline severity, 82% confident.
data/string JavaScript substring search call
baseline severity, 70% confident.
data/text base64 encoding keyword
component severity, 100% confident.
fs/write ADODB.Stream Open method call

Metadata

notable severity, 90% confident.
binary/metrics Very long embedded data line
baseline severity, 85% confident.
file/text High function density
baseline severity, 95% confident.
lang JavaScript or TypeScript basename
baseline severity, 100% confident.
lang/encoded JavaScript file basename
baseline severity, 92% confident.
library Large minified JavaScript bundle

20 of 48 traits shown

Identity

SHA-256 a065fabdc9612feff4e685f6c81b88b9dd37fe11c4f53a2cc80a13ad02d149ae
Filename d696aee3132d899608adbd0dafcd0d0f.js

Origin

Source harvest

Timeline

First seen 21 May 2026 17:12 UTC
First analyzed 24 May 2026 10:53 UTC
Last analyzed 24 May 2026 10:53 UTC
Last updated 24 May 2026 10:53 UTC

Labeling

Label good
Label source harvest
Traits version 9ea7c