MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3d16deb2bf2c8917d508fca5480dbe555ba68a88fd7ef8d4f4c23d74f0d03e03. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

48

Origin country :

DK

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	221036299-043825-sanlccjavap0004-6531.js
File size:	593'974 bytes
SHA256 hash:	59a93103e1c7fbded984a0a77859bbde5b8fc23bdb7d2c9049886bb551eb415f
MD5 hash:	24873aee6b3f805945aeefe267cc660c
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/31a51ee9-bb67-4172-9228-a6eaf21b7388/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Malware.25834.JsHeur.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

aes base64 conhost conhost.exe crypto evasive explorer lolbin obfuscated persistence powershell repaired tracker wscript

Link:

https://www.filescan.io/uploads/6a8ff51d50f29e4b2f676c0f/reports/a0606896-30d4-44b0-9b17-6c5db196339a/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/3d16deb2bf2c8917d508fca5480dbe555ba68a88fd7ef8d4f4c23d74f0d03e03

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-08-26T13:56:00Z UTC

Last seen:

2026-08-26T14:02:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3d16deb2bf2c8917d508fca5480dbe555ba68a88fd7ef8d4f4c23d74f0d03e03/results?tab=lookup

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3d16deb2bf2c8917d508fca5480dbe555ba68a88fd7ef8d4f4c23d74f0d03e03/

ReversingLabs TitaniumCloud Script-JS.Trojan.Heuristic

Threat name:

Script-JS.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-26 13:49:00 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

12 of 36 (33.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=huln5mv7fserpvii7ssuqdn6kvn2ncui7v7prvhuyi6xj4gqhybq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3d16deb2bf2c8917d508fca5480dbe555ba68a88fd7ef8d4f4c23d74f0d03e03

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

z 3d16deb2bf2c8917d508fca5480dbe555ba68a88fd7ef8d4f4c23d74f0d03e03

(this sample)

any.run

https://app.any.run/tasks/a7c52e96-4afd-40a9-9352-2c6f32e4a3e4

  

Link

https://tria.ge/260827-bkjgdaycpc/behavioral2

  

Delivery method

Distributed via e-mail attachment