MALICIOUS — 3a31eb4321379176f4335c28a95659a57081fc1e5c7ea5688c3c9f8551da3974

MALICIOUS — 3a31eb4321379176f4335c28a95659a57081fc1e5c7ea5688c3c9f8551da3974 is a script sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (83/100), attributed to the 4FE6730A family. 3 of 53 detection engines flagged it.

Identification

• SHA-256: 3a31eb4321379176f4335c28a95659a57081fc1e5c7ea5688c3c9f8551da3974
• SHA-1: 9957f68bd7bc2df130fdd26f828fde366582df15
• MD5: c03f26854259d3ade9c298737aaf15b0
• ssdeep: 192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NL0ps2lSzfPku:srhNyNO0kkMKzFSDdAcIYwLesytu
• TLSH: T1D524C8877C4D1DDDCD0E542B6ECAE8432F1A9A1973A361C8C6ADCB6158F5CE0680462D
• Submitted as: 3a31eb4321379176f4335c28a95659a57081fc1e5c7ea5688c3c9f8551da3974
• File type: script · Size: 11858 bytes
• Verdict: malicious (83/100) · Family: 4FE6730A

Detections (3 of 53 engines)

• Microsoft Defender: Trojan:JS/Agent.AG!MSR
• Emsisoft (Emergency Kit): GT:JS.Injected.1.4FE6730A
• Kaspersky (KVRT): HEUR:Trojan.Script.Generic

Why this verdict

The malicious score of 83/100 is the fusion of 3 weighted signals:

• Microsoft Defender flagged Trojan:JS/Agent.AG!MSR (rule Trojan:JS/Agent.AG!MSR) - engine signal, weight 0.55, confidence 0.85
• Emsisoft (Emergency Kit) flagged GT:JS.Injected.1.4FE6730A (rule GT:JS.Injected.1.4FE6730A) - engine signal, weight 0.55, confidence 0.85
• Obfuscated javascript script: dynamic-exec (rule script-deobfuscation) - static signal, weight 0.55, confidence 0.75

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded domains

• jquery.org
• a.fn.live

More 4FE6730A samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report