MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 790b6e858f3bcd3f6c561c38a755264cb8969d815ea4e0153409d1aec9e56702. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	790b6e858f3bcd3f6c561c38a755264cb8969d815ea4e0153409d1aec9e56702
SHA3-384 hash:	850ffdcb3df1f3ae4b5bf630c08afc258b1fb221204fa3a67b461d67598e056eea17ff5923b80436f759c16b979bb7f4
SHA1 hash:	1a8d943ebca5fe8e5753a82a6da5f29ec288cc94
MD5 hash:	00c412297fc6da161f71392bf7116ec6
humanhash:	three-massachusetts-eleven-asparagus
File name:	14169798.js
Download:	download sample
File size:	1'769'119 bytes
First seen:	2026-07-24 12:38:44 UTC
Last seen:	2026-07-24 12:38:47 UTC
File type:	js
MIME type:	text/plain
ssdeep	48:Q9PNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNPNP7:s6rW/5YYl9HTEqFim+O
TLSH	T1E1858D386F8C915C9C2788170FD12986D8BE601A96EE4C7F7E7A2B72C6C1B54485CE3D
Magika	javascript
Reporter	TomU
Tags:	js

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

137

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.VBS.Obfus-201.UNOFFICIAL

Alert

Create hunting rule

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/790b6e858f3bcd3f6c561c38a755264cb8969d815ea4e0153409d1aec9e56702

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-07-08T05:03:00Z UTC

Last seen:

2026-07-26T01:04:00Z UTC

Hits:

~1000

Link:

https://opentip.kaspersky.com/790b6e858f3bcd3f6c561c38a755264cb8969d815ea4e0153409d1aec9e56702/results?tab=lookup

Nucleon Malprob Benign

Score:

6%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/790b6e858f3bcd3f6c561c38a755264cb8969d815ea4e0153409d1aec9e56702

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/790b6e858f3bcd3f6c561c38a755264cb8969d815ea4e0153409d1aec9e56702/

ReversingLabs TitaniumCloud Script-JS.Trojan.Leonem

Threat name:

Script-JS.Trojan.Leonem

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-08 11:09:52 UTC

File Type:

Binary

AV detection:

12 of 36 (33.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=pefw5bmphpgt63cwdq4kovjgjs4jnhmbl2soafjubhi25spfm4ba._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  10/10

Tags:

execution

Link:

https://tria.ge/reports/260724-pvxcwazgrg/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Command and Scripting Interpreter: JavaScript

Command and Scripting Interpreter: PowerShell

Badlisted process makes network request

Process spawned unexpected child process

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.55

Link:

https://yomi.yoroi.company/submissions/790b6e858f3bcd3f6c561c38a755264cb8969d815ea4e0153409d1aec9e56702