MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 0fc4a52a5952152a331688b652e252ef68d7a9efe2dab744915623df70d7f0ec. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Hades
Vendor detections: 2
| SHA256 hash: | 0fc4a52a5952152a331688b652e252ef68d7a9efe2dab744915623df70d7f0ec |
|---|---|
| SHA3-384 hash: | 1d51ff0605cc427eda95e116e2d1fe0df3817cf3000e98d987061f6146584c1170e43a83292b5163fcedc59ba9227905 |
| SHA1 hash: | 8407f65102bec32cb5b3578311fa04d7fcf5257f |
| MD5 hash: | 188f2d1f47419006b9c40d4819709abd |
| humanhash: | kentucky-black-delta-magnesium |
| File name: | loader.js |
| Download: | download sample |
| Signature | Hades |
| File size: | 315 bytes |
| First seen: | 2026-09-12 06:41:55 UTC |
| Last seen: | Never |
| File type: |  js |
| MIME type: | text/plain |
| ssdeep | 6:dMPcALA7erAjaENoAGRXGYpMzEVdMQ6a0g66liQwhj6A:G077erAjaENd0EoVJ0g66lNwl6A |
| TLSH | T18CE0CDC487D3B634E4B599DAE5980707381BC17232119EC170CC46E96FC18A08B52FA5 |
| Magika | javascript |
| Reporter |  devmihaylov |
| Tags: | bytenode electron Hades js Loader |
devmihaylov
Hades, a licensed crimeware kit sold as a streaming application, combining browser and wallet theft, live Discord credential interception, a socket.io remote access channel and a desktop lockdown. The application entry point named by app.asar, 315 bytes that require() the bytenode compiled file and nothing else, so no readable JavaScript ships with the product.Intelligence
File Origin
# of uploads :
1
# of downloads :
150
Origin country :
BGVendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
2.5/10
Confidence:
100%
Tags:
repaired
Verdict:
Unknown
File Type:
text
Score:
0%
Verdict:
Benign
File Type:
SCRIPT
Gathering data
Detection(s):
Suspicious file
Gathering data
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe Dropped by
Hades
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.