MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 41a912d72ba9d5db95094be333f79b60cae943a2bd113e20cc171f86ebcb86cf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	41a912d72ba9d5db95094be333f79b60cae943a2bd113e20cc171f86ebcb86cf
SHA3-384 hash:	09b7464a11327c6e6c3cea57190d2e06eb8458821fca31dd93aa314e3ebd97057a1b72030c549b5dea967b73fc9c4a18
SHA1 hash:	a62d6db6511d4f03f783f0bc4067636f8777e19c
MD5 hash:	554306835785d730a6bddbc68e12d3f0
humanhash:	october-asparagus-kentucky-comet
File name:	a.js
Download:	download sample
Signature	BeaverTail Alert Create hunting rule
File size:	6'217 bytes
First seen:	2023-12-22 14:53:57 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	192:wcf2m87gkE2tgUVKcyLm+gxu8MV84WdK+qx4Fg17EaT58IuGDLTr2LKpaR:wyl2tTkc7up84OawGDzGR
TLSH	T1FFD1F9F693F192690340B1D0453E5665D21EAEE8393785D3FAAE4F0324DB1F858B26F0
Reporter	smica83
Tags:	BeaverTail js Lazarus

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

212

Origin country :

HU

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Other.Malware-gen.19754.19346.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/6585a30c6b1c24604601a512/reports/08e6265d-e05d-4f1b-9dda-86d9df12b2ac/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/41a912d72ba9d5db95094be333f79b60cae943a2bd113e20cc171f86ebcb86cf

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1366296

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/41a912d72ba9d5db95094be333f79b60cae943a2bd113e20cc171f86ebcb86cf/

ReversingLabs TitaniumCloud Script-JS.Trojan.Beavertail

Threat name:

Script-JS.Trojan.Beavertail

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-09-13 17:39:18 UTC

File Type:

Text (JavaScript)

AV detection:

11 of 23 (47.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=igurfvzlvhk5xfijjprth543mdfosq5cxuit4igmc4pyn26lq3hq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/231222-s2f61scbb9/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/41a912d72ba9d5db95094be333f79b60cae943a2bd113e20cc171f86ebcb86cf