MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 12a05db31fe283f505bb7fbf057d0e15cf1db20b7e4b52a516065cdd0b54d4d0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	12a05db31fe283f505bb7fbf057d0e15cf1db20b7e4b52a516065cdd0b54d4d0
SHA3-384 hash:	2253bc9f0d983582cb1a375aca532b152a449d58f5dd4f5f3943581d7e17b9abbf500226512242dbead8b127411d0fb0
SHA1 hash:	ce204d699603a7bacd08e0c64a56198368ed5592
MD5 hash:	d0e8f86f75c0da359e63d165733bbb29
humanhash:	sweet-butter-oven-skylark
File name:	Swift_00023140kX.rar
Download:	download sample
File size:	7'476 bytes
First seen:	2026-06-06 18:44:14 UTC
Last seen:	Never
File type:	rar
MIME type:	application/x-rar
ssdeep	192:WNstae7FNXNA1LZaBNOy2r2cWlS4KdVhT1Z91Lx7:WNsFNNiZa/+2cWl2NZ91F7
TLSH	T1C9F1AFCB96113595DBF7E493084EDA36640A2C0D980A8207FE4706BD9F52FF308C86F4
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	rar

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

42

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	Swift_00023140k$.js
File size:	73'074 bytes
SHA256 hash:	cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3
MD5 hash:	72824a7ee0c1c8879d90a4bb495adeb1
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/c97d4db8-9c4a-4d80-808c-a8a3d5ca9a3d/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

91.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a20503657b7bf261d609cd9

Tags:

obfuscate xtreme shell

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-vm fingerprint repaired

Link:

https://www.filescan.io/uploads/6a246a8b46e44aecc0d29d32/reports/19d2177a-e6c2-4625-87be-e487b0363d9f/overview

Hybrid Analysis Trojan.Generic

Verdict:

Suspicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/12a05db31fe283f505bb7fbf057d0e15cf1db20b7e4b52a516065cdd0b54d4d0

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-03T20:34:00Z UTC

Last seen:

2026-06-03T20:47:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/12a05db31fe283f505bb7fbf057d0e15cf1db20b7e4b52a516065cdd0b54d4d0/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/12a05db31fe283f505bb7fbf057d0e15cf1db20b7e4b52a516065cdd0b54d4d0/

ReversingLabs TitaniumCloud Script-JS.Trojan.Heuristic

Threat name:

Script-JS.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-03 15:34:49 UTC

AV detection:

13 of 24 (54.17%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ckqf3my74kb7kbn3p67qk7iocxhr3mqlpzfvfjiwazon2c2u2tia._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/12a05db31fe283f505bb7fbf057d0e15cf1db20b7e4b52a516065cdd0b54d4d0