MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 05ea919c7db1aa97b69825995720d383fa936fc02db8294cf1796c8b4883f9e7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	05ea919c7db1aa97b69825995720d383fa936fc02db8294cf1796c8b4883f9e7
SHA3-384 hash:	acf40250dd9b98efef972ada73cd0d7ca7dd3dd0a23fa31bd411e66afb2bb3f58894e46cab47789330f02c3150343c0d
SHA1 hash:	4ec827cbafdcd5f84ac9038628fa38faf01ed626
MD5 hash:	4d2954fdf41a1526f961933d9dac4c9d
humanhash:	beer-quebec-early-robert
File name:	Requisition_Confirmation_2026_Order.pdf.txz
Download:	download sample
Signature	PureLogsStealer Alert Create hunting rule
File size:	111'919 bytes
First seen:	2026-07-03 17:55:02 UTC
Last seen:	2026-07-03 17:56:57 UTC
File type:	rar
MIME type:	application/x-rar
ssdeep	3072:moVJCEJYbJ3NYufqzFUhtZksKVc1JEcza2FtzkmXN:moJJY13NYMyotZfKih1XN
TLSH	T113B313226676DA203BC5F32489D0732ED99706761F5A72E2F8B35818F73467C8D22F85
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	PureLogsStealer rar

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

43

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	Requisition_Confirmation_2026_Order.js
File size:	801'796 bytes
SHA256 hash:	596cd42fca00132c5e1920360b1982585dafa9fcc44917fce26781a8d6e41b4c
MD5 hash:	a42916a2ea5a06838f3a62502291eecf
MIME type:	text/plain
Signature	PureLogsStealer

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/8c15f912-d4c3-4905-983c-8c1d8e6f3bd6/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.JS.Obfus-2662.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a32512254a045c34089d440

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

conhost masquerade powershell repaired

Link:

https://www.filescan.io/uploads/6a47f7a2df45f8126e15549b/reports/456e8688-8f24-4564-9725-44aede9e042e/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/05ea919c7db1aa97b69825995720d383fa936fc02db8294cf1796c8b4883f9e7

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-17T08:57:00Z UTC

Last seen:

2026-06-17T09:04:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/05ea919c7db1aa97b69825995720d383fa936fc02db8294cf1796c8b4883f9e7/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/05ea919c7db1aa97b69825995720d383fa936fc02db8294cf1796c8b4883f9e7/

Neiki Exploit.Win32

Verdict:

Malicious

Threat:

Exploit.Win32

Link:

https://tip.neiki.dev/file/05ea919c7db1aa97b69825995720d383fa936fc02db8294cf1796c8b4883f9e7

ReversingLabs TitaniumCloud Win32.Trojan.Kepavll

Threat name:

Win32.Trojan.Kepavll

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-17 09:58:20 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

13 of 36 (36.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=axvjdhd5wgvjpnuyewmvoigtqp5jg36afw4csthrpfwiwsed7htq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/05ea919c7db1aa97b69825995720d383fa936fc02db8294cf1796c8b4883f9e7