MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 40645f9052e03fed3a33a7e0f58bc2c263eeae02cbc855b9308511f5dc134797. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	40645f9052e03fed3a33a7e0f58bc2c263eeae02cbc855b9308511f5dc134797
SHA3-384 hash:	cbe1cacfa46c03b7f1d0cb75d040b9a0351b1e3f44baf5349af03a445faa095d8e3e07e0884996058199cc398cb57c3e
SHA1 hash:	6c1b14160819d2bfb7c324a293e22da4cfa5646c
MD5 hash:	4eaefb2fc78df5118aa943301b57391b
humanhash:	minnesota-december-solar-foxtrot
File name:	config.js
Download:	download sample
Signature	BeaverTail Alert Create hunting rule
File size:	6'504 bytes
First seen:	2023-12-22 14:54:18 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	192:wzYCYmFKc+sl70iW6MSam+EPgPO9PQtsZML42geKVOyJdIgfrutqFv1FRLGiWfiS:wzXYm/tl7ZqoAoQtDL3OGic+s
TLSH	T160D10972A3F9C29A035441D4E07D67A4C6144A647C8740D6B92F4F8326CA5FC28FBEF8
Reporter	smica83
Tags:	BeaverTail js Lazarus

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

269

Origin country :

HU

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Other.Malware-gen.5425.15039.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Script.SNH-gen.7149.27943.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6585a348a6bc59352f2ddec0/reports/b95618f9-37ec-4e3e-b6ec-fc9dc9b45cf8/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/40645f9052e03fed3a33a7e0f58bc2c263eeae02cbc855b9308511f5dc134797

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1366295

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/40645f9052e03fed3a33a7e0f58bc2c263eeae02cbc855b9308511f5dc134797/

ReversingLabs TitaniumCloud Script-JS.Trojan.BeaverTail

Threat name:

Script-JS.Trojan.BeaverTail

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-09-22 20:14:57 UTC

File Type:

Text (JavaScript)

AV detection:

14 of 37 (37.84%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ibsf7ecs4a762ortu7qplc6cyjr65lqczpeflojqqui7lxati6lq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/231222-s2f61scbc2/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/40645f9052e03fed3a33a7e0f58bc2c263eeae02cbc855b9308511f5dc134797