Open-source atomic malware analysis

Analyze another

workbench-dev.html

HTML
Verdict: BENIGN
SHA256: aa9532b1439814becaed11fac9fbfec2aa9b1dc155517076ac5d027d1c9e793b
Mal-ecule
O(C)H(U)
Size 2.7 KB download
First seen 88 days ago
Analyzed 88 days ago

Objectives

notable severity, 85% confident.
command-and-control/dropper/delivery HTML creates object URL
baseline severity, 86% confident.
credential-access/cloud Regex component marker
baseline severity, 80% confident.
execution/interpreter/script ADODB Type assignment fragment (ype =)
baseline severity, 100% confident.
supply-chain/hidden-payload/extensions Derived string condition
component severity, 70% confident.
impact/ui DOM write API innerHTML or appendChild

Micro-behaviors

notable severity, 84% confident.
ui/window/manage Creates script DOM element
component severity, 90% confident.
communications/http/url Regex component marker
component severity, 72% confident.
data/format HTML comment marker

Metadata

baseline severity, 90% confident.
document ES module entrypoint script
baseline severity, 100% confident.
lang javascript code embedded in string
component severity, 70% confident.
file/text JavaScript file under 5KB

Identity

SHA-256 aa9532b1439814becaed11fac9fbfec2aa9b1dc155517076ac5d027d1c9e793b
Filename workbench-dev.html

Origin

Source cyclotron

Timeline

First seen 25 May 2026 21:41 UTC
First analyzed 26 May 2026 02:04 UTC
Last analyzed 26 May 2026 02:04 UTC
Last updated 2 Jun 2026 20:49 UTC

Labeling

Label good
Label source cyclotron
Traits version 60d49