MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a
SHA3-384 hash:	7c224eb1ec0549197e5727d3ab35d22248316d93737e797f0226be3240c9009e8ab53fba0791e16a18fbf11cf3e1a944
SHA1 hash:	0cf4dc780a81be2923dc18b863cc822d32c416c7
MD5 hash:	1b078bdc1d38238a4dfa077db4978e32
humanhash:	alpha-ink-white-paris
File name:	Order_No._MP.S.006025-08524.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	3'615'656 bytes
First seen:	2026-07-03 17:51:48 UTC
Last seen:	2026-07-03 17:52:46 UTC
File type:	js
MIME type:	text/plain
ssdeep	98304:BdtBqAo0SzG8ji58qCYhqjJF2ABObhT3BfktEq:Qy8jiuYEtJ
Threatray	412 similar samples on MalwareBazaar
TLSH	T12DF508340314E762D1A81EA25E5D7E58150D9DCFD8F5FB033A6A4BB50339EB2A37A360
Magika	txt
Reporter	TomU
Tags:	AgentTesla js

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

57

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a47f6a432952f8351cf6db1

Tags:

cryxos lien

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug downloader dropper evasive masquerade obfuscated obfuscated packed repaired xloader

Link:

https://www.filescan.io/uploads/6a47f6e0a4254f99f84d53b7/reports/d6972325-e6db-4422-88d9-0e1824d77632/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-06-15T16:50:00Z UTC

Last seen:

2026-07-03T12:38:00Z UTC

Hits:

~10000

Detections:

Trojan-Spy.Stealer.FTP.C&C Trojan-PSW.Agensla.TCP.C&C Trojan-Downloader.JS.Cryptoload.sb PDM:Trojan.Win32.Generic HEUR:Trojan-Dropper.Script.Generic HEUR:Trojan.Script.Lubfus.gen HEUR:Trojan.Script.Generic HEUR:Trojan-Downloader.Script.Generic

Link:

https://opentip.kaspersky.com/0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a/results?tab=lookup

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a/

Neiki Family.DONUTLOADER

Verdict:

Malicious

Threat:

Family.DONUTLOADER

Link:

https://tip.neiki.dev/file/0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a

ReversingLabs TitaniumCloud Win32.Trojan.Malgent

Threat name:

Win32.Trojan.Malgent

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-16 00:56:07 UTC

File Type:

Binary

AV detection:

11 of 36 (30.56%)

Threat level:

  5/5

Spamhaus Hash Blocklist Malicious file

Detection(s):

Malicious file

Link:

https://check.spamhaus.org/check/?searchterm=bwgojleomhw47ozab42uujrpq6nlyqgbctvchdvxp4xagsoo4qva._file

Threatray agenttesla

Verdict:

malicious

Label(s):

agenttesla

Alert

Create hunting rule

Similar samples:

153a492ed524469bc8fd9a9fcd4d0ec3215caa4b0bb1e34bd779fad17271b56a

AgentTesla

6f8c26cc1096a3d10169efc5a2eba3f0370b905b3322b839e9af3bcbad540748

AgentTesla

8dffead0450847a53d2c7d585aa2150acc44a4813ecbd31f0e7f6c61d7b08c05

AgentTesla

96e22da4d5c0ea4b0efde0ad3eaa8fdedc60228f84fb3c56899afbb9338da2a1

AgentTesla

b271d12f4da306da079d7592f4611ffbd1f4c0a10f62031fc1d96a259728f96d

AgentTesla

dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486

AgentTesla

fa74415147a3f022e754f3450a8d25f9ee01d54ed29c9f882c4c321f09a484bf

AgentTesla

+ 402 additional samples on MalwareBazaar

Hatching Triage agenttesla

Result

Malware family:

agenttesla

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla collection discovery execution keylogger spyware stealer trojan

Link:

https://tria.ge/reports/260703-wfzb9adv8y/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Family: AgentTesla

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.70

Link:

https://yomi.yoroi.company/submissions/0d8ce4ac8e61edcfbb200f354a262f879abc40c114ea238eb77f2e0349cee42a