MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963
SHA3-384 hash:	3438134b5745b70e9f415952e8da3ae0d8c735e1b23f4aa3aa046a06c9b57f90574e54cf5dcef54e9af68ab4cc0e699b
SHA1 hash:	5dfa031ccd4cb45f5338eeaad6416a54b15bf0f8
MD5 hash:	b81d8031450264845cdf79851b6a4807
humanhash:	moon-foxtrot-avocado-five
File name:	stage1_decrypted_wave1_48109c33cf45.js
Download:	download sample
File size:	3'867 bytes
First seen:	2026-03-15 18:23:02 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	96:/Pd/jKcftTD2J3cHG6dvzN0Y1pIcsu0jBUSye:/PIiX2J3cRZuEIjBL
TLSH	T1E08109C12F36FB6682CA78B2F03D4C019139C5B84259E044EF2C9A4731CB651B9E5F32
Magika	javascript
Reporter	tipo_deincognito

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

85

Origin country :

ES

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Multi.Agent-IJ.93635911.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b6f91788c80c01586a7fe9

Tags:

n/a

Hybrid Analysis JS.Stealer.K.Generic

Verdict:

Malicious

Labled as:

JS.Stealer.K.Generic

Link:

https://www.hybrid-analysis.com/sample/48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

js

Link:

https://opentip.kaspersky.com/48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963/results?tab=lookup

Nucleon Malprob Benign

Score:

2%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963

ReversingLabs TitaniumCloud Script-JS.Infostealer.Heuristic

Threat name:

Script-JS.Infostealer.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-15 18:23:19 UTC

File Type:

Text (JavaScript)

AV detection:

5 of 24 (20.83%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jaijym6piv2ju764eyu2jqi5tl6ftzjxrjfdndqiwihz3p6kpfrq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260315-w1kplaav2z/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963