MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2d6292ce5aedb2cf1b7bd9c3adcc53924188312eab99946c0cf5f0b1fc049817. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2d6292ce5aedb2cf1b7bd9c3adcc53924188312eab99946c0cf5f0b1fc049817
SHA3-384 hash:	af6b4a47316d77b08bb2c72f5641a32e72bda99c5a183e3e04395d175ed69d3c53dea0e1e7f21e54b99a2d380ed374f0
SHA1 hash:	bf3bc5a2755eb61a51ff046d2ea5f075d0bf8607
MD5 hash:	51dc3fb7a35ecda417550164a872db04
humanhash:	tango-ten-burger-south
File name:	PONoX34VIVRES5052026.rar
Download:	download sample
Signature	PureLogsStealer Alert Create hunting rule
File size:	114'449 bytes
First seen:	2026-06-06 18:44:16 UTC
Last seen:	Never
File type:	rar
MIME type:	application/x-rar
ssdeep	3072:aOubZrQIAcZ3mlNQttXWldWpmoOv1IJDshUA59h:a79ZSQ3uoONeA59h
TLSH	T13DB3120C25267B558196267C073019760856BE9F79C60CE6F0D8C7ADF9E48BEC0C7EAE
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	PureLogsStealer rar

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

51

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	PONo 34VIVRES5052026.js
File size:	846'172 bytes
SHA256 hash:	ea56213fa9cddb08dae3b254c36665d44991f57dace4afe578c1c8f0079187af
MD5 hash:	fa2f993f548222fc8b48556afd9184e1
MIME type:	text/plain
Signature	PureLogsStealer

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/d71927f6-e03e-4109-a2b9-1ef9be61ffd1/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a228b0ff8676ad4d361569b

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

base64 conhost obfuscated powershell repaired

Link:

https://www.filescan.io/uploads/6a246a8d099ef368af23fb26/reports/66637e44-064e-4043-82c1-ea8cdd00d80b/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/2d6292ce5aedb2cf1b7bd9c3adcc53924188312eab99946c0cf5f0b1fc049817

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-05T11:51:00Z UTC

Last seen:

2026-06-05T11:59:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2d6292ce5aedb2cf1b7bd9c3adcc53924188312eab99946c0cf5f0b1fc049817/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2d6292ce5aedb2cf1b7bd9c3adcc53924188312eab99946c0cf5f0b1fc049817/

ReversingLabs TitaniumCloud Script-JS.Trojan.Heuristic

Threat name:

Script-JS.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-05 03:29:38 UTC

AV detection:

8 of 37 (21.62%)

Threat level:

  2/5

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/2d6292ce5aedb2cf1b7bd9c3adcc53924188312eab99946c0cf5f0b1fc049817