MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3e022c9dd7c1268fdb9108dd4a92c54f1c8cf071e8bdd7c93e371fe3a9fa4bb6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3e022c9dd7c1268fdb9108dd4a92c54f1c8cf071e8bdd7c93e371fe3a9fa4bb6
SHA3-384 hash:	5c089e975d986d9922c43e07fef497c03c2ca12da41549c0ff13af21e17c4ba8402c18aa6de3d53b34368f5179febfc9
SHA1 hash:	09ccc608e74b1e42939b98f49ed85db467c5c9f1
MD5 hash:	3d15ce61908afb6fb7db2bb3c1493e64
humanhash:	delta-sodium-harry-hawaii
File name:	선적_서류송장_및_포장_명세서,_원산지_증명서.rar
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	1'575'426 bytes
First seen:	2026-06-12 21:56:43 UTC
Last seen:	Never
File type:	rar
MIME type:	application/x-rar
ssdeep	49152:4tsfivvlq9fFFsdGUtzwXyC0ft6XEILs0zd2:XfiHg9fFFAzwiC0ft6UszQ
TLSH	T1A375330A322263BBF7E5DA7637243255957FEABF395B83FAC030A643085CD1695728C4
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	AgentTesla rar

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

92

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	선적 서류송장 및 포장 명세서, 원산지 증명서.JS
File size:	5'838'889 bytes
SHA256 hash:	ec791b5c5a90c643066852a5b824612409f4645e8f39912528480b3a3d8f1496
MD5 hash:	ee2f3a4d3e4e54a3bdf3564c293e7942
MIME type:	text/plain
Signature	AgentTesla

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/ff9d14a4-0c88-463a-982b-75e91e49a215/

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a2c810f34eaf30d8ce554c4

Tags:

infosteal virus hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug dropper evasive obfuscated obfuscated packed repaired

Link:

https://www.filescan.io/uploads/6a2c80ca554e843ff869d711/reports/04d4574d-fb6b-42b4-83c5-7cdaf9f5f777/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/3e022c9dd7c1268fdb9108dd4a92c54f1c8cf071e8bdd7c93e371fe3a9fa4bb6

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-10T04:55:00Z UTC

Last seen:

2026-06-11T00:47:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3e022c9dd7c1268fdb9108dd4a92c54f1c8cf071e8bdd7c93e371fe3a9fa4bb6/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3e022c9dd7c1268fdb9108dd4a92c54f1c8cf071e8bdd7c93e371fe3a9fa4bb6/

ReversingLabs TitaniumCloud Win32.Trojan.Yomal

Threat name:

Win32.Trojan.Yomal

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-10 09:26:24 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

13 of 36 (36.11%)

Threat level:

  5/5

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3e022c9dd7c1268fdb9108dd4a92c54f1c8cf071e8bdd7c93e371fe3a9fa4bb6