MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 421798ea7bd98b7027ae3965fba2e50464a5c8da3d0b5f77e7bfded1e3dc01f9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	421798ea7bd98b7027ae3965fba2e50464a5c8da3d0b5f77e7bfded1e3dc01f9
SHA3-384 hash:	84078982e76f593d4d5ec634cec5cf8a3eae1502b03dbcecc7410966406f994ae80c3675c95877232ceb93708748ecb1
SHA1 hash:	9af50ed498012828b892ba8eb3500e7b89a20fc5
MD5 hash:	cd14d2460ed0b968499bd8f7a1133b54
humanhash:	low-july-sodium-mockingbird
File name:	justificanteTransferencia.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	3'469'494 bytes
First seen:	2026-07-13 17:56:03 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:tTxA2NAr44fMNVIIA/aYXYXPBOd41IazLJtk9Cg5zpIpVj/Wjl6IWM:tTxBNAr4IuVzANX0l1IuFC9CWzpIjj/w
Threatray	165 similar samples on MalwareBazaar
TLSH	T1E0F5294193A5A5377321E7AD523AEE3DA40E500328EACF04345ED638791CE9BD349BE7
Magika	javascript
Reporter	JAMESWT_WT
Tags:	AgentTesla ftp-telewatte-pe-com js Spam-ITA

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

172

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a5526da737be7d52c91b1a1

Tags:

virus lien sage blic

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug downloader dropper evasive obfuscated obfuscated packed repaired xloader

Link:

https://www.filescan.io/uploads/6a5526d27c1d9cab5a3c5874/reports/6331b18d-1a30-432a-95f4-f07d8f8cafdc/overview

Hybrid Analysis JS/TrojanDropper.Agent

Verdict:

Malicious

Labled as:

JS/TrojanDropper.Agent

Link:

https://www.hybrid-analysis.com/sample/421798ea7bd98b7027ae3965fba2e50464a5c8da3d0b5f77e7bfded1e3dc01f9

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-07-13T09:16:00Z UTC

Last seen:

2026-07-15T14:24:00Z UTC

Hits:

~1000

Link:

https://opentip.kaspersky.com/421798ea7bd98b7027ae3965fba2e50464a5c8da3d0b5f77e7bfded1e3dc01f9/results?tab=lookup

Nucleon Malprob Malware

Score:

97%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/421798ea7bd98b7027ae3965fba2e50464a5c8da3d0b5f77e7bfded1e3dc01f9

Malva.RE

Gathering data

CERT.PL MWDB agenttesla

Detection:

agenttesla

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/421798ea7bd98b7027ae3965fba2e50464a5c8da3d0b5f77e7bfded1e3dc01f9/

ReversingLabs TitaniumCloud Script-JS.Trojan.Egairtigado

Threat name:

Script-JS.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-13 13:18:47 UTC

File Type:

Text (JavaScript)

AV detection:

9 of 24 (37.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=iilzr2t33gfxaj5ohfs7xixfarsklsg2hufv657hx7pndy64ah4q._file

Threatray agenttesla

Verdict:

malicious

Label(s):

agenttesla

Alert

Create hunting rule

Similar samples:

0041750b145156664772aef035961d7723957fe70a15a1563129224106d09769

AgentTesla

6c0474d7cf20a8a8ced7f9a5a59609ee58245a9a413e73d1738dad13f85d7f2b

AgentTesla

8da9fd778e01e2089de2c8874a80489b0c42afbc3f7499f4a5e6b6cd5c1ca658

AgentTesla

b1407ede7cf6976b4d234573be97175987019fceacfd76141f4083cc731fc7f2

AgentTesla

b5c078c186f17edf92e101e8df4d49f0e89515f81ce4dbbcbb611e76417ca978

AgentTesla

d010314800912704efec2cca545328ef2eb9a97893c34271d92df69e207f4a7c

AgentTesla

e68e2cde02efea3eeaff3125e510ce5fba502d918e379ba0a1ed8f808079dc0d

AgentTesla

ebbee1d2030789e37bd47f5e1f5cac792af7c31c05a451d220e03672202c07ea

AgentTesla

efc5f23ff325be267fa80f88dbbf0abefc4f479b52a6c8b0dd4963c39f3bf177

AgentTesla

error

AgentTesla

+ 155 additional samples on MalwareBazaar

Hatching Triage agenttesla

Result

Malware family:

agenttesla

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla collection discovery execution keylogger spyware stealer trojan

Link:

https://tria.ge/reports/260713-wja4tsdt8n/

Behaviour

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Family: AgentTesla

VMRay AgentTesla

Malware family:

AgentTesla

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/421798ea7bd9/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/421798ea7bd98b7027ae3965fba2e50464a5c8da3d0b5f77e7bfded1e3dc01f9