MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2007fded27c19bc668382b4f6bf97b6b437d74fcc9bfb813b533655eb7708709. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2007fded27c19bc668382b4f6bf97b6b437d74fcc9bfb813b533655eb7708709
SHA3-384 hash:	d1ff688daafad78382ecd149f671263f03c23f53869203e1096e2c885396aa8f45b250a181f2c949aaa838035e9dee50
SHA1 hash:	8bd283674b1f99eb689a791d8609702c11263844
MD5 hash:	f6feb4c8801464a6244ea802d244d738
humanhash:	mirror-queen-johnny-white
File name:	INQUIRY RFQ-004102126.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	7'198'846 bytes
First seen:	2026-06-15 13:02:38 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:MgHbP/Ub9D5Tv8EkdU/zy8Na25yFJ0L8Wo+gFvwiBi/jByQbKO79BJ:nydTUEkcNa25y/0LN+FG9ZbKOBBJ
Threatray	198 similar samples on MalwareBazaar
TLSH	T1957610310354C672E2589FAE26B97128540D5DCA88F9EB017A6E87B1127AC33D37B7F1
Magika	javascript
Reporter	James_inthe_box
Tags:	AgentTesla exe js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

149

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a2ff82034eaf30d8ce655a1

Tags:

spawn lien blic hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug dropper evasive obfuscated obfuscated packed repaired

Link:

https://www.filescan.io/uploads/6a2ff81b0bddd27b6e071175/reports/4b1c3e5c-8e7a-476e-836e-72081961c4ad/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/2007fded27c19bc668382b4f6bf97b6b437d74fcc9bfb813b533655eb7708709

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-06-09T05:29:00Z UTC

Last seen:

2026-06-15T08:53:00Z UTC

Hits:

~100

Detections:

Trojan-PSW.MSIL.Agensla.sb Trojan-Downloader.JS.Cryptoload.sb HEUR:Trojan.Script.Generic HEUR:Trojan-Dropper.Script.Generic HEUR:Trojan-Downloader.Script.Generic Trojan.Win32.Shellcode.sb Trojan-PSW.Win32.Disco.sb

Link:

https://opentip.kaspersky.com/2007fded27c19bc668382b4f6bf97b6b437d74fcc9bfb813b533655eb7708709/results?tab=lookup

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/2007fded27c19bc668382b4f6bf97b6b437d74fcc9bfb813b533655eb7708709

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2007fded27c19bc668382b4f6bf97b6b437d74fcc9bfb813b533655eb7708709/

Neiki Family.AGENTTESLA

Verdict:

Malicious

Threat:

Family.AGENTTESLA

Link:

https://tip.neiki.dev/file/2007fded27c19bc668382b4f6bf97b6b437d74fcc9bfb813b533655eb7708709

ReversingLabs TitaniumCloud Script-JS.Trojan.Generic

Threat name:

Script-JS.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-06-12 15:18:25 UTC

File Type:

Binary

AV detection:

6 of 36 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Malicious file

Detection(s):

Malicious file

Link:

https://check.spamhaus.org/check/?searchterm=ead733jhygn4m2byfnhwx6l3nnbx25h4zg73qe5vgnsv5n3qq4eq._file

Threatray donutloader agenttesla

Verdict:

malicious

Label(s):

donutloader

Alert

Create hunting rule

agenttesla

Alert

Create hunting rule

Similar samples:

0fa25fe613da2ec00cd97ac83ccf8e5b510a423ff460be030d71cdc48befc06f

AgentTesla

1497f3ac5cea6ff1326aff8c3e774fe5a67dff656d1fb9e212307bad5300d9fe

AgentTesla

2d6c2f5c0122193732dbb6749994c5e6286e456545e012d47d4ec7f4d5abe7ce

AgentTesla

34e1551055a3db36eea0438f165ab00b60c47e503e8af3f8ecc9aca66c4ffb13

AgentTesla

4f0f7232dc36c768cd481ee494acc71c1de3581e46776d2ab6707ef8b225a3e6

AgentTesla

5060df36d2b6701839279f5ac009ecf132a4659afd568eafcfa3a215a2b734e8

AgentTesla

76e089a21b93f2349ca1dacfd8d4fae4b57702f302103a83ca7c0d988991100e

AgentTesla

8fe592d0af4913f9cc100a369c358bd7463dc94d2d5a1d7e9bf824be2e26b268

AgentTesla

aa0f0b7c3e070ff4c61eb188fb1121a3c7cd553dfe5df8d2f089498e7b08abd7

AgentTesla

+ 188 additional samples on MalwareBazaar

Hatching Triage donutloader

Result

Malware family:

donutloader

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla family:donutloader collection execution keylogger loader spyware stealer trojan

Link:

https://tria.ge/reports/260615-qajrqabv5x/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Detects DonutLoader

Family: AgentTesla

Family: DonutLoader

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.