MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1f780c733ae407c6e1a586ff09e33f780a373ecd8745039fbbeecc8946b51844. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1f780c733ae407c6e1a586ff09e33f780a373ecd8745039fbbeecc8946b51844
SHA3-384 hash:	6a1ddbd514a927686375239ac885b491b23ea13840d6ba0d726636d1ff48a90691a13eda7794087f45d5b0231fe25db5
SHA1 hash:	156a382491ce79c1928dbda23c50ee9991c7517b
MD5 hash:	e9a11df794e1a8ec4d6754379913d88d
humanhash:	april-mockingbird-mockingbird-salami
File name:	kmkdisco
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	339'288 bytes
First seen:	2023-08-01 12:23:44 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	6144:JRYPw3Jqgkfn2NJe5hhuOcvlt2igEwqhoDXy3:bKg42NJMhhuF2amDS
TLSH	T1037483F10242BDFB674E4D64D1EC3A08ACDCAA932B5091DDB88C0AD5F1B590C9DB7A74
Reporter	JAMESWT_WT
Tags:	Fiyat10 js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

118

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Generic-EXE.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.PUA.Base64EXE-2.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

obfuscated

Link:

https://www.filescan.io/uploads/64c8f9656635e735db26b6b2/reports/80d51a73-9e1c-4509-a7e7-2311dc978c21/overview

Hybrid Analysis MSILHeracles.Generic

Verdict:

Malicious

Labled as:

MSILHeracles.Generic

Link:

https://www.hybrid-analysis.com/sample/1f780c733ae407c6e1a586ff09e33f780a373ecd8745039fbbeecc8946b51844

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1284190

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1f780c733ae407c6e1a586ff09e33f780a373ecd8745039fbbeecc8946b51844/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=d54ay4z24qd4nynfq37qtyz7pafdopwnq5cqhh5353gisrvvdbca._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/1f780c733ae407c6e1a586ff09e33f780a373ecd8745039fbbeecc8946b51844