MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2d47e303a6c278097ead4e6a754edf1a860ed7587f37e228bcea59eb7092f7a7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2d47e303a6c278097ead4e6a754edf1a860ed7587f37e228bcea59eb7092f7a7
SHA3-384 hash:	0e9324927e44f04504054b6bd86dac95d72966c41f7ac2fa8e67f55ef32f06bc03c0dfe3449cd854cd75820903d51b24
SHA1 hash:	1b4e6d941ee0a08eddb5045f7dc50544ed8bc894
MD5 hash:	6604addaba8902252a2a6a45667c3282
humanhash:	november-arkansas-maryland-green
File name:	shellSession.js
Download:	download sample
File size:	4'168 bytes
First seen:	2026-10-01 10:39:16 UTC
Last seen:	Never
File type:	js
MIME type:	text/x-c++
ssdeep	96:ANccZYY6uN5wRmRuWGN3DjgaQ39dcxDmoX9v:A6cZDZNaRmRtGNPg5kNNv
TLSH	T1D081CD9B37FA463C58B3E6111E5F5401A77A800F369DDDD879EC6640EFB4C2882A1B38
Magika	javascript
Reporter	emilstahl
Tags:	ChainScript EtherHiding js NodeJS-RAT polygon

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

113

Origin country :

DK

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  0/10

Confidence:

100%

Tags:

repaired

Link:

https://www.filescan.io/uploads/6abe3e998b02338873f32261/reports/f57bcc9d-955a-48e0-8954-175151b82500/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/2d47e303a6c278097ead4e6a754edf1a860ed7587f37e228bcea59eb7092f7a7

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-10-01T10:49:00Z UTC

Last seen:

2026-10-01T10:53:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2d47e303a6c278097ead4e6a754edf1a860ed7587f37e228bcea59eb7092f7a7/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/2d47e303a6c278097ead4e6a754edf1a860ed7587f37e228bcea59eb7092f7a7

Malva.RE Malware

Verdict:

Malware

YARA:

1 match(es)

Tags:

DeObfuscated PowerShell T1027 T1059.001

Link:

https://app.malva.re/file/6604addaba8902252a2a6a45667c3282

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2d47e303a6c278097ead4e6a754edf1a860ed7587f37e228bcea59eb7092f7a7/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fvd6ga5gyj4as7vnjzvhktw7dkda5v2yp436ekf45jm6w4es66tq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261001-m69q8syaph/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/2d47e303a6c278097ead4e6a754edf1a860ed7587f37e228bcea59eb7092f7a7