MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4b2f8251e954786dae9eec2a21f06678afebfb187b7e3003733be5ca12312a13. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4b2f8251e954786dae9eec2a21f06678afebfb187b7e3003733be5ca12312a13
SHA3-384 hash:	a37a19c8caf973f695c82848f1fe5139d3d8cbb74e2c0438212b5fdbcee85d685b7a68eb4208dcbf984a09a9f5f0635d
SHA1 hash:	e814a78af4f2ec9598f7358b459c55d48bcf5905
MD5 hash:	9c409bf99cbe6c4525b8326f851db988
humanhash:	carbon-echo-monkey-louisiana
File name:	index.js
Download:	download sample
File size:	5'171 bytes
First seen:	2026-10-01 10:38:30 UTC
Last seen:	Never
File type:	js
MIME type:	text/x-c
ssdeep	48:47O5T6AU2LrW/3vI1WWHIi+E00C3Plp97+i1+iH+i7AM6uiMtEW7PtkmAk6Q3qkW:T6ZvviH/pCNpln9p6uiW7tk4w9Q5i
TLSH	T1C6B1418B5BEA145C6D73EE19660AA825E2D7810F234CCECDB1CC71E0DFF422485E1A79
Magika	javascript
Reporter	emilstahl
Tags:	ChainScript EtherHiding js NodeJS-RAT polygon

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

116

Origin country :

DK

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ace9bf22e5d8a93d8151f18

Tags:

n/a

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/4b2f8251e954786dae9eec2a21f06678afebfb187b7e3003733be5ca12312a13

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-09-22T05:40:00Z UTC

Last seen:

2026-10-02T18:31:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/4b2f8251e954786dae9eec2a21f06678afebfb187b7e3003733be5ca12312a13/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/4b2f8251e954786dae9eec2a21f06678afebfb187b7e3003733be5ca12312a13

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4b2f8251e954786dae9eec2a21f06678afebfb187b7e3003733be5ca12312a13/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jmxyeupjkr4g3lu65qvcd4dgpcx6x6yypn7daa3thps4uerrfijq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261001-m69fgayapg/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI SNC

Threat name:

SNC

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4b2f8251e954786dae9eec2a21f06678afebfb187b7e3003733be5ca12312a13