MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0c76358cf582c52ee3f6a86888ee458209f249dfbb5c7adffac2dce2b926133c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0c76358cf582c52ee3f6a86888ee458209f249dfbb5c7adffac2dce2b926133c
SHA3-384 hash:	4196015372b4da71682cce26474545c96cd850538b42b3ad31441a9930f2741fd96337317b00d6a480bd58a28fa524a2
SHA1 hash:	d6878cdf72275cc7108eb56f1de98f28bc94552e
MD5 hash:	400e21fa30c1ff6aaa38f0ffba2452c9
humanhash:	hotel-lactose-dakota-queen
File name:	0c76358cf582c52e.js
Download:	download sample
File size:	27'445 bytes
First seen:	2026-10-20 01:09:39 UTC
Last seen:	Never
File type:	js
MIME type:	application/javascript
ssdeep	768:lTLX+EVxFm6cKibdndptaQ9HuGJswyC/pkTAQYtDT6HJiwknOsN7KOljuOzQYqEv:ZtVxFm61ib94Q9HuGHiiwkOsN7KOljua
TLSH	T141C2FA053163A87A55CFC097E067420E7B3748857405B0ED7ABC6CDBA5B8D9A32EB339
Magika	javascript
Reporter	Tuxxin
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

158

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad6bf8fafb06e650cd7e19a

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

obfuscated repaired

Link:

https://www.filescan.io/uploads/6ad6bf8a60ce7189e622fc26/reports/d32804ad-7c96-4117-ad61-8be6ec592b83/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/0c76358cf582c52ee3f6a86888ee458209f249dfbb5c7adffac2dce2b926133c

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

js

Link:

https://opentip.kaspersky.com/0c76358cf582c52ee3f6a86888ee458209f249dfbb5c7adffac2dce2b926133c/results?tab=lookup

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

n/a

Score:

22 / 100

Link:

https://www.joesandbox.com/analysis/1989144

Signature

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/0c76358cf582c52ee3f6a86888ee458209f249dfbb5c7adffac2dce2b926133c

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0c76358cf582c52ee3f6a86888ee458209f249dfbb5c7adffac2dce2b926133c/

ReversingLabs TitaniumCloud Script-JS.Packed.Generic

Threat name:

Script-JS.Packed.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-10-20 01:10:23 UTC

File Type:

Text (JavaScript)

AV detection:

8 of 24 (33.33%)

Threat level:

  1/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=br3dldhvqlcs5y7wvbuir3sfqie7eso7xnohvx72yloofojgcm6a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261020-bjndyattb1/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0c76358cf582c52ee3f6a86888ee458209f249dfbb5c7adffac2dce2b926133c