MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 75ebdaee1723f1157d81132bc667504e1353f9bba6863e4b804aa867dfcfa09c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	75ebdaee1723f1157d81132bc667504e1353f9bba6863e4b804aa867dfcfa09c
SHA3-384 hash:	f56ae7991b1780587582c7e4745d5b551d84bbf1cef2e6f2b66936fdaf4d18e145c44b17ed0eb204c9fdffd2c49dbc50
SHA1 hash:	3c7699cd8f83ff2b9daea1ab15c19bc445c1fb3c
MD5 hash:	cfa79d2e28273aeecdd8e57fd423af18
humanhash:	lion-lithium-grey-cold
File name:	CHQUE SWIFT COPY.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	3'592'963 bytes
First seen:	2026-07-23 13:42:32 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:44cWO3eKPAQ5MrSh9f8Sh9QGwB00fE/n+iJ2YDu6aiWSKvWNA/Qwslsy9:ULbFQSrk0Jv/n+82Qu/WNL/lb
TLSH	T11DF54B10E6642122919DDB3DC125FF68442D600B63B9EF0E37A895B4669AF07734EBF3
Magika	javascript
Reporter	James_inthe_box
Tags:	AgentTesla exe js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

185

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug downloader dropper evasive obfuscated obfuscated packed repaired xloader

Link:

https://www.filescan.io/uploads/6a621a50d215c9a9db8b2bcc/reports/56104860-7115-40ec-8eaf-f558899d3481/overview

Hybrid Analysis JS/Agent.UNV trojan

Verdict:

Malicious

Labled as:

JS/Agent.UNV trojan

Link:

https://www.hybrid-analysis.com/sample/75ebdaee1723f1157d81132bc667504e1353f9bba6863e4b804aa867dfcfa09c

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-07-23T03:31:00Z UTC

Last seen:

2026-07-23T10:16:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/75ebdaee1723f1157d81132bc667504e1353f9bba6863e4b804aa867dfcfa09c/results?tab=lookup

Nucleon Malprob Malware

Score:

95%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/75ebdaee1723f1157d81132bc667504e1353f9bba6863e4b804aa867dfcfa09c

Malva.RE

Gathering data

CERT.PL MWDB agenttesla

Detection:

agenttesla

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/75ebdaee1723f1157d81132bc667504e1353f9bba6863e4b804aa867dfcfa09c/

Spamhaus Hash Blocklist Malicious file

Detection(s):

Malicious file

Link:

https://check.spamhaus.org/check/?searchterm=oxv5v3qxepyrk7mbcmv4mz2qjyjvh6n3u2dd4s4ajkugpx6pucoa._file

Threatray AgentTesla DonutLoader

Verdict:

malicious

Label(s):

AgentTesla

Alert

Create hunting rule

DonutLoader

Alert

Create hunting rule

Link:

https://reports.threatray.com/6730be6f-fc72-4c8f-8a01-1112a401be67

Similar samples:

147c897e00c759b643fb5dd6afc05be16433f78ecb5ff563f767721c6b502fdd

AgentTesla

1497f3ac5cea6ff1326aff8c3e774fe5a67dff656d1fb9e212307bad5300d9fe

AgentTesla

22664b468509d5a3ef8d156c623b64fd1acf1ebb19d175af6990cfac6178b557

AgentTesla

2e264065cf67a4b630a899e8fad202e0a6b8a3158e9f01e904b482d200986484

AgentTesla

55c8115641754b94a8ad055eecf5bf808e24de267f84d8da4b18112c40b71176

AgentTesla

87d9f4fc7f470e4723c6171d4a9fb3f37998663b84ab46965d2d7d4729fc444e

AgentTesla

c835a3ad655dfbcb2702c257019c549a3706b9331421cb35bd68f612d89f8263

AgentTesla

dd3c857fe1e186c19c7571bb9c0c42747fb2f053b6661e717141d077a1923d9d

AgentTesla

Hatching Triage donutloader

Result

Malware family:

donutloader

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla family:donutloader collection execution keylogger loader persistence spyware stealer trojan

Link:

https://tria.ge/reports/260723-q1j56sxzet/

Behaviour

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

Executes a command shell one-liner

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Detects DonutLoader

Family: AgentTesla

Family: DonutLoader

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.