MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 03a7b15f92c803535256f6efcb0db8b98fa2adef985d027121ab1d347fd9ae58. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	03a7b15f92c803535256f6efcb0db8b98fa2adef985d027121ab1d347fd9ae58
SHA3-384 hash:	40beafb0a31038f89de6ddceb3285cb895cfc15b367a957163a494fbc4436628d643ad8489299a806f590c4f7e7a1893
SHA1 hash:	f94b3b73da394c53196e0bf6cffe02ce22cf98a5
MD5 hash:	efb764a7919d9983c0ee54b40e81feff
humanhash:	equal-ten-tango-whiskey
File name:	Request_for_Quote_Conversion_to_USD_and_Price_Validation__November_Quote_Attached_pdf.txz
Download:	download sample
File size:	107'591 bytes
First seen:	2026-06-06 18:44:12 UTC
Last seen:	2026-06-08 15:01:07 UTC
File type:	rar
MIME type:	application/x-rar
ssdeep	3072:RPrtl9JTYLeGRIth0l6/uDwDf+BKFpuqEHZg:pnGqXbWDE+BKFpOq
TLSH	T12AB3128073AB938D813D1412037E39BC6B19A546FF56A16EE2904E4257A44CBF7E189F
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	rar

Intelligence

---

File Origin

# of uploads :

6

# of downloads :

49

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	output_a06iuuis.js
File size:	795'558 bytes
SHA256 hash:	02f021137074a7eb8059a84ffd92a4c0588b9ab09fbd2ffd9aa534d4ee94b500
MD5 hash:	daf97aecd2c1b6efd1a60aee658ea694
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/bab106a1-361d-406a-aba8-3a0bb4278248/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a246a922f0f550abbfa0559

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

conhost obfuscated powershell repaired

Link:

https://www.filescan.io/uploads/6a246a89099ef368af23fb20/reports/8d4cff0c-9c82-4e1a-8eb7-d9e9945fab5c/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/03a7b15f92c803535256f6efcb0db8b98fa2adef985d027121ab1d347fd9ae58

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-06T10:36:00Z UTC

Last seen:

2026-06-06T10:50:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/03a7b15f92c803535256f6efcb0db8b98fa2adef985d027121ab1d347fd9ae58/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/03a7b15f92c803535256f6efcb0db8b98fa2adef985d027121ab1d347fd9ae58/

Neiki Trojan.Script

Verdict:

Malicious

Threat:

Trojan.Script

Link:

https://tip.neiki.dev/file/03a7b15f92c803535256f6efcb0db8b98fa2adef985d027121ab1d347fd9ae58

ReversingLabs TitaniumCloud Win32.Trojan.Kepavll

Threat name:

Win32.Trojan.Kepavll

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-05 12:43:39 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

12 of 37 (32.43%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=aot3cx4szabvgusw63x4wdnyxgh2flpptboqe4jbvmoti76zvzma._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/03a7b15f92c803535256f6efcb0db8b98fa2adef985d027121ab1d347fd9ae58