MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0a7e309acdbcfb768174864e9cac90a4ed7fb229164261e9d647ac4e5c5c68c0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0a7e309acdbcfb768174864e9cac90a4ed7fb229164261e9d647ac4e5c5c68c0
SHA3-384 hash:	525020645392d932f5d2d3cd0c5dc319d74653d2e4aaca157a1f591fa519bcf3da3fdfb14b3fc833c0a5fe4d5d4758c0
SHA1 hash:	3e2205e2abbe11f4b96c620afc78a536098ffca1
MD5 hash:	bfe9506636ad8785d135959f2d31fd82
humanhash:	carpet-echo-stream-tennessee
File name:	Recibo de transferencia-02001.js
Download:	download sample
File size:	50'208 bytes
First seen:	2026-10-08 19:25:48 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	192:uhc03sadk0TmMZE/zm9LIubFUjblahDgNkoeiyjIFV7VtpVglYXogLmtKIr/XH8a:u26sarmv/aRIu0CVjIpVgS4gaXrwJKd
TLSH	T1FF333FA232A62D6CA0AAE7163F6FB3D485A9D707333F8F07167C519F7A8360046479D1
TrID	66.6% (.TXT) Text - UTF-16 (LE) encoded (2000/1) 33.3% (.MP3) MP3 audio (1000/1)
Magika	txt
Reporter	abuse_ch
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

159

Origin country :

SE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan.Tr.402.55382146.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad07aa96f551121ba15d3ed

Tags:

virus

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

repaired

Link:

https://www.filescan.io/uploads/6ac7ee5a969f6f5907ee1d5b/reports/ea754af8-92ce-4691-bb0e-855b1028dead/overview

Hybrid Analysis Trojan.Tr

Verdict:

Malicious

Labled as:

Trojan.Tr

Link:

https://www.hybrid-analysis.com/sample/0a7e309acdbcfb768174864e9cac90a4ed7fb229164261e9d647ac4e5c5c68c0

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

js

First seen:

2026-10-08T16:02:00Z UTC

Last seen:

2026-10-10T11:33:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/0a7e309acdbcfb768174864e9cac90a4ed7fb229164261e9d647ac4e5c5c68c0/results?tab=lookup

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1984493

Signature

Contains an in-memory .NET payload loader

Multi AV Scanner detection for submitted file

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

9%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/0a7e309acdbcfb768174864e9cac90a4ed7fb229164261e9d647ac4e5c5c68c0

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0a7e309acdbcfb768174864e9cac90a4ed7fb229164261e9d647ac4e5c5c68c0/

ReversingLabs TitaniumCloud Script-JS.Trojan.Heuristic

Threat name:

Script-JS.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-10-08 19:26:22 UTC

File Type:

Text (JavaScript)

AV detection:

10 of 38 (26.32%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bj7dbgwnxt5xnaluqzhjzlequtwx7mrjczbgd2owi6we4xc4ndaa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261008-x5m6yscz71/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0a7e309acdbcfb768174864e9cac90a4ed7fb229164261e9d647ac4e5c5c68c0