MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1b52ca0fdf8513f2ff4a2acbc65cdb2c74d173b0099d0636ffe76b36c1023900. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

40

Origin country :

DK

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	RFQ.js
File size:	1'077'016 bytes
SHA256 hash:	b8700e8c6101791e6f00768999a8fe99fd64d0caf450f3bd13d7b0eadde499ff
MD5 hash:	36bf3f696dcd6c8e124b85d8bfe222b9
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/deeba15c-5163-42fd-ac63-daa0108f3e38/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a06d64446d6967b3d906eac

Tags:

shell virus spawn

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

base64 crypt encrypted obfuscated repaired

Link:

https://www.filescan.io/uploads/6a06d63cdf14f1cb2ad7030a/reports/b9e74b5f-8d0b-4757-bbc2-5c783906bfcf/overview

Hybrid Analysis Unknown

Verdict:

Suspicious

Link:

https://www.hybrid-analysis.com/sample/1b52ca0fdf8513f2ff4a2acbc65cdb2c74d173b0099d0636ffe76b36c1023900

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-05-15T06:25:00Z UTC

Last seen:

2026-05-15T06:37:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/1b52ca0fdf8513f2ff4a2acbc65cdb2c74d173b0099d0636ffe76b36c1023900/results?tab=lookup

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

1 match(es)

Tags:

Rar Archive

Link:

https://app.malva.re/file/39510e72dc690e30a666c00b9cae00ad

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1b52ca0fdf8513f2ff4a2acbc65cdb2c74d173b0099d0636ffe76b36c1023900/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=dnjmud67quj7f72kflf4mxg3fr2nc45qbgoqmnx745vtnqicheaa._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/1b52ca0fdf8513f2ff4a2acbc65cdb2c74d173b0099d0636ffe76b36c1023900

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar 1b52ca0fdf8513f2ff4a2acbc65cdb2c74d173b0099d0636ffe76b36c1023900

(this sample)

any.run

https://app.any.run/tasks/831f6e12-507f-4609-aeae-43f4b2800e6d

  

Delivery method

Distributed via e-mail attachment