Open-source atomic malware analysis

Analyze another

server.cron.test.ts

JAVASCRIPT
Verdict: BENIGN
SHA256: fa88d5e494f46f6bc7e46034c75d850b9fc979cf18fa4e1a35c97111d3872b25
Mal-ecule
O(Al)H(F₂)
Size 51.0 KB download
First seen 81 days ago
Analyzed 81 days ago

Well-known

component severity, 95% confident.
lib fetch/XMLHttpRequest/http(s) require (flatted tamper fragment)
component severity, 96% confident.
malware/backdoor Regex component marker
component severity, 100% confident.
malware/stealer Regex component marker

Objectives

suspicious severity, 90% confident.
anti-analysis/analysis-bomb Rule evaluation timeout: objectives/supply-chain/trojanized/app/context::hcaptcha-siteverify-secret-context--rx-5 took 35246ms (limit: 30000ms)
baseline severity, 75% confident.
anti-static/obfuscation/code-metrics Many no-param functions
component severity, 100% confident.
anti-analysis/timing Triple Date/Time retrieval (raw)
component severity, 100% confident.
supply-chain/trojanized/library webhook string

Micro-behaviors

notable severity, 80% confident.
fs/directory Node.js fs.rm with recursive option
notable severity, 75% confident.
fs/file Recursive delete (fs.rm/rmSync)
baseline severity, 90% confident.
communications/http HTTPS protocol prefix
baseline severity, 80% confident.
fs/temp Node.js os.tmpdir() call
baseline severity, 80% confident.
os/env Node process.env access
baseline severity, 85% confident.
os/env/vars JavaScript process.env assignment
component severity, 100% confident.
process/create/shell Regex component marker

Metadata

baseline severity, 95% confident.
import imports import
baseline severity, 100% confident.
lang new Promise() usage marker
baseline severity, 100% confident.
package Package references CHANGES
baseline severity, 75% confident.
package/testing JavaScript describe() test call
baseline severity, 100% confident.
package/testing/harness Node.js test filename suffix
baseline severity, 90% confident.
package/testing/presence Jest test file

20 of 39 traits shown

Identity

SHA-256 fa88d5e494f46f6bc7e46034c75d850b9fc979cf18fa4e1a35c97111d3872b25
Filename server.cron.test.ts

Origin

Source harvest

Timeline

First seen 15 May 2026 09:48 UTC
First analyzed 15 May 2026 15:10 UTC
Last analyzed 15 May 2026 15:10 UTC
Last updated 15 May 2026 15:10 UTC

Labeling

Label good
Label source harvest
Traits version 08128