MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9
SHA3-384 hash:	abfe4580a48686ec7b47cf9e9828da23d81eb68e1e612dbe2268170ade5e5b4893d4a2e7620a494da4e8e71db164e358
SHA1 hash:	b9a9080e0375c3137b058d14e9b5e6fdf8c5ab80
MD5 hash:	9bea006a179a13a3155bcc75c1807da4
humanhash:	beryllium-mockingbird-lamp-football
File name:	ccv.js
Download:	download sample
File size:	300 bytes
First seen:	2026-03-25 16:34:29 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	6:hFqrTFILwCfLKzd+2iN7yekJ5bgrZ2wZfQSAqoUF045:rqrGEGKAHNJAerZ2wZ4SAnUFX5
TLSH	T155E0E7015514C0D4C81123D31149825955F801433C55F1D7FF408BC95E375B057C4C9B
Magika	javascript
Reporter	JAMESWT_WT
Tags:	js WsgiDAV

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

122

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.PUA.IA.Suspicious.68864559.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69c40ed2aacb4c376b13f7f7

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive repaired webdav

Link:

https://www.filescan.io/uploads/69c40ece2346b9da57a6201f/reports/3a28d49c-fd17-4c96-b231-5429e9caaead/overview

Hybrid Analysis HEUR_TrojanDownloader_Script_Generic

Verdict:

Malicious

Labled as:

HEUR_TrojanDownloader_Script_Generic

Link:

https://www.hybrid-analysis.com/sample/0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

Detections:

HEUR:Trojan-Downloader.Script.Generic

Link:

https://opentip.kaspersky.com/0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9/results?tab=lookup

Nucleon Malprob Susipicious

Score:

31%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9/

Neiki Trojan-Downloader.Script

Verdict:

Malicious

Threat:

Trojan-Downloader.Script

Link:

https://tip.neiki.dev/file/0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bxpuz7bse4uuxbeydhjvir47zleerwc6ranoeaaumccvjsxrbtmq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260325-t3whrsdw6r/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/0ddf4cfc3227294b849819d354479fcac848d85e881ae20014608554caf10cd9