MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 348252e82e5987b59bf31f1b4cacb14a8ec123c5dd54244dcbcbbe2000376459. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	348252e82e5987b59bf31f1b4cacb14a8ec123c5dd54244dcbcbbe2000376459
SHA3-384 hash:	cea1bb4661a490c2fb4985b694351c7248c64f4d40db4e026d6002b401e16527f8e08031c70447cf282fa9025a2bd570
SHA1 hash:	09877de40bfe845138e48d8ad6cf27a78b590b5d
MD5 hash:	bdb008d3c0dd84c298e176bece922899
humanhash:	floor-lemon-floor-mountain
File name:	RlISiVRtZy.js
Download:	download sample
File size:	1'759'174 bytes
First seen:	2026-10-08 09:42:18 UTC
Last seen:	Never
File type:	js
MIME type:	application/javascript
ssdeep	1536:KZQ8NDpixQs7Da1B0od/WPTPUjJgde7boh7JO718q7X8JSMqKI2cR+4O7kEDY32c:nhPQxCcFC5FGMuIq14cKtgKtZ02Oh
TLSH	T15A8595B46C81E18874AAB8ABDDD1A81969437CECB3AFCF5505143B3C3892141AF1D9DF
Magika	javascript
Reporter	abuse_ch
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

167

Origin country :

SE

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/348252e82e5987b59bf31f1b4cacb14a8ec123c5dd54244dcbcbbe2000376459

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-10-07T16:48:00Z UTC

Last seen:

2026-10-10T07:04:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/348252e82e5987b59bf31f1b4cacb14a8ec123c5dd54244dcbcbbe2000376459/results?tab=lookup

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

n/a

Score:

22 / 100

Link:

https://www.joesandbox.com/analysis/1984056

Signature

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/348252e82e5987b59bf31f1b4cacb14a8ec123c5dd54244dcbcbbe2000376459

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/348252e82e5987b59bf31f1b4cacb14a8ec123c5dd54244dcbcbbe2000376459/

ReversingLabs TitaniumCloud Script-JS.Trojan.Heuristic

Threat name:

Script-JS.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-10-07 19:29:09 UTC

File Type:

Text (JavaScript)

AV detection:

5 of 24 (20.83%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gsbff2bolgd3lg7td4nuzlfrjkhmci6f3vkcitolzo7caabxmrmq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261008-lp3qxseb83/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.07

Link:

https://yomi.yoroi.company/submissions/348252e82e5987b59bf31f1b4cacb14a8ec123c5dd54244dcbcbbe2000376459