Open-source atomic malware analysis

Analyze another

e76e70b2e3a6cd9f97107cf032012d80.js

JAVASCRIPT
Verdict: SUSPICIOUS
SHA256: a8b4637882b98b32463705bcc5817376ecccd3dd8ce7d3a359b614058e1db515
Mal-ecule
O(As₂)H₂(DbPo)
Size 20.2 KB download
First seen 85 days ago
Analyzed 82 days ago

Objectives

suspicious severity, 90% confident.
anti-static/obfuscation/string String deobfuscation routine
notable severity, 85% confident.
anti-static/obfuscation/code-metrics Generated or transformed code
baseline severity, 80% confident.
anti-static/obfuscation Many comma sequence expressions (obfuscation)
baseline severity, 86% confident.
credential-access/cloud Regex component marker
baseline severity, 80% confident.
credential-access/financial Field filter returns true
baseline severity, 70% confident.
supply-chain/hidden-payload/extensions High ratio of single character function names
component severity, 92% confident.
anti-static/obfuscation/encoding Regex component marker
component severity, 94% confident.
supply-chain/recon-exfil Regex component marker

Micro-behaviors

suspicious severity, 90% confident.
data/encode JScript loop structure consistent with hex decoding
notable severity, 84% confident.
process/interpreter Ruby interpreter launched by another runtime
baseline severity, 90% confident.
communications/http HTTP protocol prefix
baseline severity, 90% confident.
data/encode/permutation Nested loops with multiple charAt calls
baseline severity, 90% confident.
data/source Prototype guard keyword
baseline severity, 82% confident.
data/string JavaScript substring search call
component severity, 100% confident.
os/console JavaScript console object
component severity, 100% confident.
ui/window/manage DOM or CSS size property

Metadata

baseline severity, 85% confident.
file/text High function density
baseline severity, 95% confident.
lang JavaScript or TypeScript basename
baseline severity, 100% confident.
lang/encoded JavaScript file basename
baseline severity, 80% confident.
package MIT License text

20 of 32 traits shown

Identity

SHA-256 a8b4637882b98b32463705bcc5817376ecccd3dd8ce7d3a359b614058e1db515
Filename e76e70b2e3a6cd9f97107cf032012d80.js

Origin

Source harvest

Timeline

First seen 21 May 2026 17:12 UTC
First analyzed 24 May 2026 16:53 UTC
Last analyzed 24 May 2026 16:53 UTC
Last updated 25 May 2026 22:47 UTC

Labeling

Label good
Label source harvest
Traits version 9ea7c