MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff
SHA3-384 hash:	620f2c5dee7cce5bc1c3375f3b2cb815fecb206353f55454d71428cdfacf158c54e1de715b4cfdf648bcceb780305fcd
SHA1 hash:	0e1e8f0cf7ae677a24f72340534fb16d51c4bee9
MD5 hash:	e7e9a0838b4253c3c43de5e23ef78d7d
humanhash:	don-fanta-five-bulldog
File name:	UrgentXRequestXforXQuote-73654323456787652345678-pdf.txz
Download:	download sample
File size:	114'541 bytes
First seen:	2026-06-06 18:44:05 UTC
Last seen:	2026-06-08 14:51:01 UTC
File type:	rar
MIME type:	application/x-rar
ssdeep	3072:SZDZkBatMkg4J6SxXdwKLJu+EXKYUFFcs0FnrsIVoT:SZDZk3hYd9tf5MlFrsIoT
TLSH	T1E4B312EE333C99EADAE96E0BDFD4BBCABD1EC7C35F46BA1A4540C8A1A14012010F5559
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	rar

Intelligence

---

File Origin

# of uploads :

4

# of downloads :

60

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	Urgent Request for Quote-73654323456787652345678-pdf.js
File size:	822'448 bytes
SHA256 hash:	ac2248d66cadf6597f428cde47f98c1adbb382da0473cceca632dec08ecf3e06
MD5 hash:	af6ad00a59545497b8ba0d91ddb0a6af
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/6a5f9dd6-e0a0-464c-8664-79ef2926b3aa/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a246a8b2f0f550abbfa0548

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

conhost powershell repaired

Link:

https://www.filescan.io/uploads/6a246a8612da0d249c66f5d3/reports/94d1a7b9-fb8c-4822-8f19-7aebc6094e0f/overview

Hybrid Analysis Trojan.GenericS

Verdict:

Malicious

Labled as:

Trojan.GenericS

Link:

https://www.hybrid-analysis.com/sample/007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-04T09:05:00Z UTC

Last seen:

2026-06-05T04:58:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff/

Neiki Trojan.Script

Verdict:

Malicious

Threat:

Trojan.Script

Link:

https://tip.neiki.dev/file/007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff

ReversingLabs TitaniumCloud Win32.Trojan.Malgent

Threat name:

Win32.Trojan.Malgent

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-04 08:06:53 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

9 of 36 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ab6bmrqljnkazw63eseoxg7fpoxnkorr6jkexwug4pjb7npadh7q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/007c16460b4b540cdbdb2488eb9be57baed53a31f2544bda86e3d21fb5e019ff