MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5f01c49b66f9b508de04b86700292db9556e08fa3914cc04eea4e6a3a5970db8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5f01c49b66f9b508de04b86700292db9556e08fa3914cc04eea4e6a3a5970db8
SHA3-384 hash:	efbd279c49a27c244506c2250319cf7d32993734040c2cccafabefd2683352280bd6f9d7899956cb732f514aa22e8798
SHA1 hash:	7565a9c462be958180f8efddce61c70e7d5cee86
MD5 hash:	4931a86648f21a2d737f5a3187048b40
humanhash:	cat-red-connecticut-mexico
File name:	OIgCV34nGT45.js
Download:	download sample
File size:	132'566 bytes
First seen:	2026-10-13 18:39:33 UTC
Last seen:	Never
File type:	js
MIME type:	application/javascript
ssdeep	3072:enmfvjzFQqnfkDdWsWWFLUUeKEQNgTg5tfUcpMh8RC:3DM54t5MtfUcpMf
TLSH	T1A0D3B788FFC8FE64A3E6A534115B0C499EFDBB11C05DD8D8D291EF9038BA144EA71E85
Magika	javascript
Reporter	aachum
Tags:	AmnesiaStealer ClickFix js lunomac-com macOS

iamaachum

https://lunomac.com/ => https://streamprocessor.pro/3grqd6/OIgCV34nGT45

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

250

Origin country :

ES

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.25959.JsHeur.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.JS.Obfus-1030.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.JS.Obfus-1050.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad12d0d6f551121ba1641b9

Tags:

trojan virus

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

encrypted obfuscated repaired

Link:

https://www.filescan.io/uploads/6ace7b174b3d48f6dfbc1f7f/reports/54cf7fbd-811c-4eef-9152-a613edb5ead6/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/5f01c49b66f9b508de04b86700292db9556e08fa3914cc04eea4e6a3a5970db8

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

js

Link:

https://opentip.kaspersky.com/5f01c49b66f9b508de04b86700292db9556e08fa3914cc04eea4e6a3a5970db8/results?tab=lookup

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1986679

Signature

Multi AV Scanner detection for submitted file

Potential obfuscated javascript found

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

80%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/5f01c49b66f9b508de04b86700292db9556e08fa3914cc04eea4e6a3a5970db8

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5f01c49b66f9b508de04b86700292db9556e08fa3914cc04eea4e6a3a5970db8/

ReversingLabs TitaniumCloud Win32.Trojan.Egairtigado

Threat name:

Win32.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-10-12 18:43:10 UTC

File Type:

Text (JavaScript)

AV detection:

12 of 23 (52.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=l4a4jg3g7g2qrxqexbtqakjnxfkw4ch2hekmybhouttkhjmxbw4a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261013-xbdqeshx5x/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.60

Link:

https://yomi.yoroi.company/submissions/5f01c49b66f9b508de04b86700292db9556e08fa3914cc04eea4e6a3a5970db8