MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 4b57ff1fb792e2c017d725f7152985613d1ff34613d518a0368d9add945b66e7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 7
| SHA256 hash: | 4b57ff1fb792e2c017d725f7152985613d1ff34613d518a0368d9add945b66e7 |
|---|---|
| SHA3-384 hash: | fb61ad39c073e1f74027282e421364c8be97def3c62f7380b9012e7180fff77ade8fe32d578d050c2729db13d53dee82 |
| SHA1 hash: | 99384708e06264322957ab5700e257795a79db2f |
| MD5 hash: | d4daece32268202e4c958a1262f35877 |
| humanhash: | xray-skylark-utah-potato |
| File name: | ccv.js |
| Download: | download sample |
| File size: | 294 bytes |
| First seen: | 2026-04-09 05:56:33 UTC |
| Last seen: | Never |
| File type: |  js |
| MIME type: | text/plain |
| ssdeep | 6:hFqrTFILwCfLKzd+2iN7yeQjMtIBuyN5L2fPSAqoUF045:rqrGEGKAHNJQAtIYynL2fPSAnUFX5 |
| TLSH | T11BE02B055B24D1C0A8A5E7D35568919581FC41937C15E1FBFE818BCB1EAFAB443C4C8F |
| Magika | javascript |
| Reporter |  abuse_ch |
| Tags: | js |
Intelligence
File Origin
# of uploads :
1
# of downloads :
105
Origin country :
SEVendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Tags:
n/a
Verdict:
Malicious
Threat level:
10/10
Confidence:
100%
Tags:
evasive opendir persistence powershell repaired webdav
Verdict:
Malicious
File Type:
js
First seen:
2026-04-09T03:14:00Z UTC
Last seen:
2026-04-10T23:54:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Downloader.Script.Generic
Result
Threat name:
n/a
Detection:
malicious
Classification:
spyw
Score:
52 / 100
Signature
Opens network shares
Sigma detected: WScript or CScript Dropper
Windows Scripting host queries suspicious COM object (likely to drop second stage)
Behaviour
Behavior Graph:
Score:
34%
Verdict:
Susipicious
File Type:
SCRIPT
Gathering data
Verdict:
Malicious
Threat:
Trojan-Downloader.Script
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
3/10
Tags:
execution
Behaviour
Command and Scripting Interpreter: JavaScript
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
js 4b57ff1fb792e2c017d725f7152985613d1ff34613d518a0368d9add945b66e7
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.