MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e
SHA3-384 hash:	f3c0c7701d8c01e4c8f94262dc1a7c8280288cbc7f92857400bd74d5d388736cc416db36e4f745f1edbe05544070d7d6
SHA1 hash:	4f218f53751f95464cb879102256cde68e97c803
MD5 hash:	f31e9446266ebdc21c99524a37633a2f
humanhash:	island-jersey-coffee-johnny
File name:	4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e.html
Download:	download sample
File size:	211'705 bytes
First seen:	2026-03-10 12:50:06 UTC
Last seen:	Never
File type:	html
MIME type:	text/html
ssdeep	6144:FHPsZpSr6pOyfTQiwkFwSMQX4wMc+d5q1:VPsZpm6pOkPwkFw7QIwMBno
TLSH	T14924A41BF03719B425406E88AD2325E79ECCD0529BB0327066EDE6EFC47E87860D9677
TrID	80.6% (.HTM/HTML) HyperText Markup Language with DOCTYPE (12501/2/4) 19.3% (.HTML) HyperText Markup Language (3000/1/1)
Magika	html
Reporter	smica83
Tags:	html UKR

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

82

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Script.SNH-gen.37786872.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b0139ce41a5a099931c19a

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

pterodo

Link:

https://www.filescan.io/uploads/69b0139397feb4afd67b4b97/reports/ec526008-63f3-4375-a9f2-14a11854ea3e/overview

Hybrid Analysis JS/Pterodo.AJ trojan

Verdict:

Suspicious

Labled as:

JS/Pterodo.AJ trojan

Link:

https://www.hybrid-analysis.com/sample/4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

html

Link:

https://opentip.kaspersky.com/4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e/results?tab=lookup

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

phis

Score:

68 / 100

Link:

https://www.joesandbox.com/analysis/1881219

Signature

AI detected malicious page (phishing or scam)

Downloads suspicious files via Chrome

Large href element pointing to data found

Malicious sample detected (through community Yara rule)

Potential malicious VBS script found (has network functionality)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

74%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e/

ReversingLabs TitaniumCloud Win32.Trojan.Etset

Threat name:

Win32.Trojan.Etset

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-10 12:50:39 UTC

File Type:

Text (HTML)

AV detection:

7 of 24 (29.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=iokmgr6eulv3tno3egv37o6slobibzrd6p32arc272p63hw2q57a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/4394c347c4a2ebb9b5db21abbfbbd25b8280e623f3f7a0445afe9fed9eda877e