MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6c3a7e8568bf2be5e06bcbede0a12d346b4bb14ab22d8d61100359e95af40215. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6c3a7e8568bf2be5e06bcbede0a12d346b4bb14ab22d8d61100359e95af40215
SHA3-384 hash:	1a46812bef3d905ae808bf480542cab14e1da643f91d019c3e66fcd9c7e45a37169b7b78e8ae031ef64e28c6b4bc2a06
SHA1 hash:	1956ffbc181ac016c5f88199e231fab1b66c591d
MD5 hash:	72d9a93fe49433830af7341c42266d4d
humanhash:	purple-william-oscar-bravo
File name:	SKMX6739921081.rar
Download:	download sample
File size:	279'683 bytes
First seen:	2026-07-03 18:01:12 UTC
Last seen:	Never
File type:	rar
MIME type:	application/x-rar
ssdeep	6144:zIskbBo/g/2DkOdms2of1+r7Yej76slKAKwnA8TUlyKmTYB152mRP:kbCg/gkq7F1iP1nAwUUi2u
TLSH	T1E254224B701CC63CB539CAA2886592C153E79CD77AD3813C9EE6272BA09177325498EF
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	rar

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

47

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	SKM 6739921081.js
File size:	1'981'922 bytes
SHA256 hash:	5fa2597dd8991305f4f01a16264edc4d758d437e5ab5a341365bd1b61b60148d
MD5 hash:	252c71a0f855acf701e55cd30a83f71f
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/d1764819-31d2-4897-a24e-7d1ad1fe57e6/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.JS.Obfus-417.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a47f9bb762b0b26f3cf7abe

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

conhost downloader encrypted powershell repaired

Link:

https://www.filescan.io/uploads/6a47f9adf529a0a1207dc2e0/reports/69acfb96-ce98-4e02-9b12-d2c3f6df0ca1/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/6c3a7e8568bf2be5e06bcbede0a12d346b4bb14ab22d8d61100359e95af40215

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-26T18:13:00Z UTC

Last seen:

2026-06-27T04:33:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/6c3a7e8568bf2be5e06bcbede0a12d346b4bb14ab22d8d61100359e95af40215/results?tab=lookup

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

1 match(es)

Tags:

Rar Archive

Link:

https://app.malva.re/file/72d9a93fe49433830af7341c42266d4d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6c3a7e8568bf2be5e06bcbede0a12d346b4bb14ab22d8d61100359e95af40215/

ReversingLabs TitaniumCloud Script-JS.Trojan.Heuristic

Threat name:

Script-JS.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-26 08:27:27 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

10 of 23 (43.48%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nq5h5blix4v6lydlzpw6bijngrvuxmkkwiwy2yiqanm6swxuaikq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/6c3a7e8568bf2be5e06bcbede0a12d346b4bb14ab22d8d61100359e95af40215