MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0
SHA3-384 hash:	d0ef4495a7755170db824973cfbcbea17b469ec1dddf6ad5a865f194d2d286c88327100f2d3f316f09df239946f5f7b4
SHA1 hash:	5d92f31072844f583b837a9560848a1c783d2aef
MD5 hash:	cee7443bf9b70094aedb48e4d3f63258
humanhash:	early-july-johnny-glucose
File name:	SOA_MAY-JUNE_2026.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	4'921'820 bytes
First seen:	2026-07-03 18:01:33 UTC
Last seen:	2026-07-03 18:02:57 UTC
File type:	js
MIME type:	text/plain
ssdeep	98304:yG0HYgBXqDrQ5pZkiDGtdvJEr0RlUQEdq474flJW7JQvuKJF4ijHNzdRISdPhlum:Q4gRqQ5n1GtdS86q474flJW7JQvuKJFJ
Threatray	420 similar samples on MalwareBazaar
TLSH	T16D36094157D4A1777330E7AD523AEE78A40E900368DACF15349ED728392CD87AB18BE7
Magika	javascript
Reporter	TomU
Tags:	AgentTesla js

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

127

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a47f9e232952f8351cf716c

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

agenttesla anti-debug downloader dropper evasive obfuscated obfuscated packed repaired xloader

Link:

https://www.filescan.io/uploads/6a47f9b8df45f8126e155991/reports/111a6610-511c-4c62-ab46-7553c81336b0/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-06-28T19:55:00Z UTC

Last seen:

2026-07-04T09:40:00Z UTC

Hits:

~1000

Detections:

Trojan-Downloader.JS.Cryptoload.sb PDM:Trojan.Win32.Generic HEUR:Trojan.Script.Generic HEUR:Trojan-Dropper.Script.Generic HEUR:Trojan-Downloader.Script.Generic

Link:

https://opentip.kaspersky.com/7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0/results?tab=lookup

Nucleon Malprob Malware

Score:

95%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0/

Neiki Family.AGENTTESLA

Verdict:

Malicious

Threat:

Family.AGENTTESLA

Link:

https://tip.neiki.dev/file/7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0

ReversingLabs TitaniumCloud Win32.Trojan.Leonem

Threat name:

Win32.Trojan.Leonem

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-29 00:58:23 UTC

File Type:

Text (JavaScript)

AV detection:

13 of 36 (36.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=p3qyetex7oy3u2oja7kvf26onazkmlzg3vexgejpyrtpulp7ahya._file

Threatray agenttesla

Verdict:

malicious

Label(s):

agenttesla

Alert

Create hunting rule

Similar samples:

09eb254ca162965a3722fd345476cbbacbd46e7d6d27632c4ce8ae614c961a2d

AgentTesla

153a492ed524469bc8fd9a9fcd4d0ec3215caa4b0bb1e34bd779fad17271b56a

AgentTesla

6f8c26cc1096a3d10169efc5a2eba3f0370b905b3322b839e9af3bcbad540748

AgentTesla

8be9560f26392b4e905203d1464ab7e6bb17c0091b3a346fa443867b6b9d8e41

AgentTesla

8dffead0450847a53d2c7d585aa2150acc44a4813ecbd31f0e7f6c61d7b08c05

AgentTesla

96e22da4d5c0ea4b0efde0ad3eaa8fdedc60228f84fb3c56899afbb9338da2a1

AgentTesla

b271d12f4da306da079d7592f4611ffbd1f4c0a10f62031fc1d96a259728f96d

AgentTesla

b5add4b2a280e4e59eea05f553833a0e9a314a76106dd7c346a4b37b2255ae73

AgentTesla

dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486

AgentTesla

error

AgentTesla

fa74415147a3f022e754f3450a8d25f9ee01d54ed29c9f882c4c321f09a484bf

AgentTesla

+ 410 additional samples on MalwareBazaar

Hatching Triage agenttesla

Result

Malware family:

agenttesla

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla collection discovery execution keylogger spyware stealer trojan

Link:

https://tria.ge/reports/260703-wmrkzsaw3l/

Behaviour

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Accesses Microsoft Outlook profiles

Checks computer location settings

Executes dropped EXE

Reads WinSCP keys stored on the system

Reads data files stored by FTP clients

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Family: AgentTesla

VMRay AgentTesla

Malware family:

AgentTesla

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/7ee1824c97fb/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.55

Link:

https://yomi.yoroi.company/submissions/7ee1824c97fbb1ba69c907d552ebce6832a62f26dd4973112fc466fa2dff01f0