MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8
SHA3-384 hash:	ec0515f97d69590795029e1b95a68e40bef2c4c285e71b326cc20e2e20952802a52ec8876b68550d1b18b1b62c1633ce
SHA1 hash:	f8e10736acebc18d0cf7eb1cce8a2a60079eef6f
MD5 hash:	e0a0486f9119d12f7d96141788be02b3
humanhash:	yankee-snake-hydrogen-three
File name:	Update_13.js
Download:	download sample
File size:	8'337'794 bytes
First seen:	2026-05-29 06:52:21 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	6144:9ubnYpscp3SqA5mPYsTvQw1z8jBZlLtH+Bp89S5mf+1wpNEVwS0msFJvXiESUWjm:pPmcK
TLSH	T1E886DDAB6DDC361E3010B1C6F48521F5E6621336DBDE12D9B8F928337AF649AC02D746
Magika	javascript
Reporter	JAMESWT_WT
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

109

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a1937ce33dfa243d40ab63c

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

repaired

Link:

https://www.filescan.io/uploads/6a1937bce05d89b3613ee02c/reports/2331ba53-4eec-4bce-b450-8a89cb23b705/overview

Hybrid Analysis JS/TrojanDropper.Agent

Verdict:

Suspicious

Labled as:

JS/TrojanDropper.Agent

Link:

https://www.hybrid-analysis.com/sample/70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

text

First seen:

2026-05-30T23:15:00Z UTC

Last seen:

2026-05-30T23:32:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8/results?tab=lookup

Nucleon Malprob Susipicious

Score:

48%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8

ReversingLabs TitaniumCloud Win32.Trojan.Kepavll

Threat name:

Win32.Trojan.Kepavll

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-05-29 06:38:02 UTC

File Type:

Text (JavaScript)

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ocdc4tpexwvzwo2jqcyjbgblvibcz3oah5gyhetaxmqlwf46z3ma._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260529-hnfm8aet5j/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.60

Link:

https://yomi.yoroi.company/submissions/70862e4de4bdab9b3b4980b090982baa022cedc03f4d839260bb20bb179eced8