MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 071abb7ade85dccb47fdcbae1c3e62569def4e9d6f258c67f3cd1582e47d352f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	071abb7ade85dccb47fdcbae1c3e62569def4e9d6f258c67f3cd1582e47d352f
SHA3-384 hash:	259d177fe8c712b1517822a5c2c8a44cab9b098944b2a440002cf1cab63477eee082d1f9c44802abb346d30417eb0a53
SHA1 hash:	f923a681fea6403178d94858e6013a8e681dc4d6
MD5 hash:	a5a8286dc9684650a72641c3112aaea5
humanhash:	mockingbird-sixteen-ack-colorado
File name:	k
Download:	download sample
File size:	27'561 bytes
First seen:	2026-10-27 06:09:55 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	384:z3wCMOEsugAUKN9HMd0G5UFc3kUjwNcFAXAKzvjQfGnjmTJXJ34zs:zACMIyHMOc93NQX5zsfSmP4Y
TLSH	T15EC221B8ED32875BB97949F3F2842CE22BC9C553626D1568DA7E07876657433032C8CE
Magika	javascript
Reporter	BlinkzSec
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

103

Origin country :

AT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ae046a13a56bbccb37bddde

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

obfuscated repaired

Link:

https://www.filescan.io/uploads/6ae0469e76b1e376ba93e6c6/reports/0f2b7e51-b28a-48ac-883b-edc39b3af61a/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/071abb7ade85dccb47fdcbae1c3e62569def4e9d6f258c67f3cd1582e47d352f

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

ps1

First seen:

2026-09-15T10:35:00Z UTC

Last seen:

2026-10-29T01:08:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/071abb7ade85dccb47fdcbae1c3e62569def4e9d6f258c67f3cd1582e47d352f/results?tab=lookup

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

n/a

Score:

22 / 100

Link:

https://www.joesandbox.com/analysis/1992568

Signature

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

74%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/071abb7ade85dccb47fdcbae1c3e62569def4e9d6f258c67f3cd1582e47d352f

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/071abb7ade85dccb47fdcbae1c3e62569def4e9d6f258c67f3cd1582e47d352f/

ReversingLabs TitaniumCloud Linux.Trojan.Generic

Threat name:

Linux.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-15 14:04:02 UTC

File Type:

Text

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=a4nlw6w6qxomwr75zoxbyptck2o66tu5n4syyz7tzukyfzd5guxq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261027-hdmzjsa13z/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/071abb7ade85dccb47fdcbae1c3e62569def4e9d6f258c67f3cd1582e47d352f