MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 647e4eb80115dc920cfcdc3f23a5b140af503a69909b059a2508dc97ef47a2d1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 647e4eb80115dc920cfcdc3f23a5b140af503a69909b059a2508dc97ef47a2d1
SHA3-384 hash: 33d4d335d500dcd429e95f6f4211c12acc3930078380c0d78e8e70d62dde38f4de73aa6014ddbc303dab9fde9014a904
SHA1 hash: c103d88f9cbe643cd2e6b7eb105cbe09ccc673b0
MD5 hash: bb74f9ddd1a5ebe4088933b5a25d2db7
humanhash: queen-indigo-east-rugby
File name:Solicitud de cotización.js
Download: download sample
File size:47'467 bytes
First seen:2026-07-22 09:04:50 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 768:CzLy0lRa8vK+7uOkQs7LqrRD8aD1Z9GaGuJlPzcTVQg9CSY6Uerx9qVhERgVgDi8:CzLy0lRa8vK+qOkjCD8WnPYcbsrSVhEx
TLSH T1B4237489BAC2B8644352F57B3C6FB0B7F16D4C82B288C018F266FC59FD64B04C679665
Magika javascript
Reporter lowmal3
Tags:js

Intelligence

File Origin
# of uploads :
1
# of downloads :
149
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Detection(s):
Sanesecurity.Malware.32424.UNOFFICIAL
Create hunting rule

Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/647e4eb80115dc920cfcdc3f23a5b140af503a69909b059a2508dc97ef47a2d1
Verdict:
Malicious
File Type:
js
First seen:
2026-07-09T12:12:00Z UTC
Last seen:
2026-07-23T03:21:00Z UTC
Hits:
~10000
Link:
https://opentip.kaspersky.com/647e4eb80115dc920cfcdc3f23a5b140af503a69909b059a2508dc97ef47a2d1/results?tab=lookup
Result
Threat name:
n/a
Detection:
malicious
Classification:
evad
Score:
80 / 100
Link:
https://www.joesandbox.com/analysis/1946408
Signature
Antivirus / Scanner detection for submitted sample
JavaScript source code contains functionality to generate code involving a shell, file or stream
JavaScript source code contains functionality to generate code involving HTTP requests or file downloads
Multi AV Scanner detection for submitted file
Potential obfuscated javascript found
Sigma detected: WScript or CScript Dropper
Yara detected AntiDebug via ReDoS RegEx
Behaviour
Behavior Graph:
Download SVG
Score:
92%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/647e4eb80115dc920cfcdc3f23a5b140af503a69909b059a2508dc97ef47a2d1
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/647e4eb80115dc920cfcdc3f23a5b140af503a69909b059a2508dc97ef47a2d1/
Threat name:
Script-JS.Trojan.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2026-07-09 18:53:54 UTC
File Type:
Text (JavaScript)
AV detection:
8 of 36 (22.22%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=mr7e5oabcxojedh43q7shjnricxvaotjscnqlgrfbdojp32huliq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
execution
Link:
https://tria.ge/reports/260722-k2jm5ssbrg/
Behaviour
Command and Scripting Interpreter: JavaScript
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.42
Link:
https://yomi.yoroi.company/submissions/647e4eb80115dc920cfcdc3f23a5b140af503a69909b059a2508dc97ef47a2d1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments