MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1b341c92a2bc3e9081b16d2b2521d3b6415fd6d717c066593a172daf2885cf7c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1b341c92a2bc3e9081b16d2b2521d3b6415fd6d717c066593a172daf2885cf7c
SHA3-384 hash:	ce2ca5062bfc63e3bf8b73ab8a5b79e5f368971bb2826ea68c6d62a46780dd8c0d6ecc1df1539cf5ba5eeb141f2de302
SHA1 hash:	47c3720a608083c6916ddd393beaca77e302b183
MD5 hash:	26fb1c9c1e679c743f2d493c0a889bbd
humanhash:	bakerloo-blossom-winter-pluto
File name:	Quotation.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	3'041'778 bytes
First seen:	2026-08-10 11:54:29 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	49152:MGURS3nAph9sNeSQxwowW9MbacWX6+TXZBf97xdaB0KbnXxYgE/nBGNh62crh7:MGURS3n4h9pJw6MqZBf97xdaCKzXxYgs
TLSH	T17CE53CA056087BB0AA3D672ED4276F080F2EF10BD254FE1F367C564477A675B22CD8A1
Magika	txt
Reporter	James_inthe_box
Tags:	AgentTesla exe js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

142

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.JS.Muldrop.1382.18073.32120.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug downloader dropper evasive obfuscated packed repaired xloader

Link:

https://www.filescan.io/uploads/6a79bc303b7ba2dad3f35f1a/reports/0e4a8c9e-6e5f-4523-bba0-e0155a72b095/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/1b341c92a2bc3e9081b16d2b2521d3b6415fd6d717c066593a172daf2885cf7c

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-08-07T21:40:00Z UTC

Last seen:

2026-08-10T06:12:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/1b341c92a2bc3e9081b16d2b2521d3b6415fd6d717c066593a172daf2885cf7c/results?tab=lookup

Nucleon Malprob Malware

Score:

94%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/1b341c92a2bc3e9081b16d2b2521d3b6415fd6d717c066593a172daf2885cf7c

Malva.RE

Gathering data

CERT.PL MWDB agenttesla

Detection:

agenttesla

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/1b341c92a2bc3e9081b16d2b2521d3b6415fd6d717c066593a172daf2885cf7c/

ReversingLabs TitaniumCloud Script-JS.Trojan.Generic

Threat name:

Script-JS.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-08-08 03:02:31 UTC

File Type:

Binary

AV detection:

11 of 38 (28.95%)

Threat level:

  5/5

Spamhaus Hash Blocklist Malicious file

Detection(s):

Malicious file

Link:

https://check.spamhaus.org/check/?searchterm=dm2bzevcxq7jbanrnuvskiotwzav7vwxc7agmwj2c4w26kefz56a._file

Threatray AgentTesla

Verdict:

malicious

Label(s):

AgentTesla

Alert

Create hunting rule

Link:

https://reports.threatray.com/965fe967-8f0d-4404-950d-5cd7e2979536

Hatching Triage agenttesla

Result

Malware family:

agenttesla

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla collection discovery execution keylogger spyware stealer trojan

Link:

https://tria.ge/reports/260810-n27lragn7w/

Behaviour

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Family: AgentTesla

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/1b341c92a2bc3e9081b16d2b2521d3b6415fd6d717c066593a172daf2885cf7c