MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 24c73432d81bc677c123c4acc728b015cfe090d2fe22d3ba0dad2ec9cc52eaf4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	24c73432d81bc677c123c4acc728b015cfe090d2fe22d3ba0dad2ec9cc52eaf4
SHA3-384 hash:	bef7441f8937067e9bd061c56cb251c82f2e7632d5c19bf33f8292065dc45f6d81fe9ce1e906992e4067603e0b56445b
SHA1 hash:	a6e5dd882e97d0388a4ff2547aaf34011816bacc
MD5 hash:	3897aa086a98636d5910e9a0cca8317b
humanhash:	nebraska-saturn-table-sink
File name:	deploy.js
Download:	download sample
File size:	4'084 bytes
First seen:	2026-10-01 10:38:53 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	96:pNjc8nn2wn5NVvaDSsFamTDtEwb5lgK49AX3t59DB:pNjcy2w53Se6NB
TLSH	T16781ED9743B2732847B2E751E21FBC29E1878807620ECCD6B1CC6614EFE551CD6A19F8
Magika	javascript
Reporter	emilstahl
Tags:	ChainScript EtherHiding js NodeJS-RAT polygon

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

174

Origin country :

DK

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ace9e06350c7ee8cc153390

Tags:

n/a

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/24c73432d81bc677c123c4acc728b015cfe090d2fe22d3ba0dad2ec9cc52eaf4

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-09-22T05:40:00Z UTC

Last seen:

2026-10-02T18:31:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/24c73432d81bc677c123c4acc728b015cfe090d2fe22d3ba0dad2ec9cc52eaf4/results?tab=lookup

Nucleon Malprob Benign

Score:

1%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/24c73432d81bc677c123c4acc728b015cfe090d2fe22d3ba0dad2ec9cc52eaf4

Malva.RE Malware

Verdict:

Malware

YARA:

1 match(es)

Tags:

DeObfuscated PowerShell T1027 T1059.001

Link:

https://app.malva.re/file/3897aa086a98636d5910e9a0cca8317b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/24c73432d81bc677c123c4acc728b015cfe090d2fe22d3ba0dad2ec9cc52eaf4/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=etdtimwydpdhpqjdyswmokfqcxh6begs7yrnhoqnvuxmttcs5l2a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261001-mp6cgszsgy/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/24c73432d81bc677c123c4acc728b015cfe090d2fe22d3ba0dad2ec9cc52eaf4