MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 34edad17891c9f89b8f3ee85e14e4e40ceed562d78563c0597720eb556a0e9c2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	34edad17891c9f89b8f3ee85e14e4e40ceed562d78563c0597720eb556a0e9c2
SHA3-384 hash:	7d97f32e6b1fd6ded758b7babadc30c58d7aff5177570038a9dc22bd851a9a4e22ee0eb43cfdee6f074820d29aff113d
SHA1 hash:	c2a64255bef8126b906b2e673c2e9e03f581a767
MD5 hash:	217a01b35777226f65042ef252e030c2
humanhash:	timing-maine-freddie-march
File name:	34edad17891c9f89b8f3ee85e14e4e40ceed562d78563c0597720eb556a0e9c2.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	3'456'456 bytes
First seen:	2026-07-14 09:41:32 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:Rl2ueTEfM5ZXcMWSW/b5NuF/uTH632oSNdaEvVNNXuoYjJzKpOBvFmzCZ3PLRWAi:D/eThKFSG5NuNuTcSz9vBNOzAOBvFBu
TLSH	T1BFF53A41175A9432AB6DD75CD136E930A98E201315CADF2D306ED33C3A10E5B63AEEE7
Magika	javascript
Reporter	JAMESWT_WT
Tags:	AgentTesla ftp-enogcaen-br-com js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

139

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.VBS.Obfus-168.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Malware.32567.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a5604ce56bd89099b55336a

Tags:

virus lien blic hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug dropper evasive obfuscated obfuscated packed repaired

Link:

https://www.filescan.io/uploads/6a5604934e2180ed5778d253/reports/29e896a7-e6a5-42e7-86b2-a919bbf8c183/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/34edad17891c9f89b8f3ee85e14e4e40ceed562d78563c0597720eb556a0e9c2

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-05-13T07:00:00Z UTC

Last seen:

2026-07-14T03:53:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/34edad17891c9f89b8f3ee85e14e4e40ceed562d78563c0597720eb556a0e9c2/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB agenttesla

Detection:

agenttesla

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/34edad17891c9f89b8f3ee85e14e4e40ceed562d78563c0597720eb556a0e9c2/

ReversingLabs TitaniumCloud Script-JS.Trojan.Generic

Threat name:

Script-JS.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-05-16 00:34:47 UTC

File Type:

Binary

AV detection:

9 of 36 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gtw22f4jdspytoht52c6ctsoidho2vrnpbldybmxoihlkvva5hba._file

Hatching Triage donutloader

Result

Malware family:

donutloader

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla family:donutloader collection discovery execution keylogger loader spyware stealer trojan

Link:

https://tria.ge/reports/260714-lpskyscw8s/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Detects DonutLoader

Family: AgentTesla

Family: DonutLoader

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/34edad17891c9f89b8f3ee85e14e4e40ceed562d78563c0597720eb556a0e9c2