MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f
SHA3-384 hash:	9d7baae20d4ab143fa0fedd9e40cb184a8be68ae07a3b9f9c78be51f735ece7e1c587919dacf289a2679d455b78414c1
SHA1 hash:	15de41bc2a91339624dd05c5817a118bac7b42ba
MD5 hash:	9f95647cbaf903d41c9eee162903def0
humanhash:	mississippi-potato-gee-music
File name:	VLJDX22.vbs
Download:	download sample
File size:	145 bytes
First seen:	2026-05-27 09:12:18 UTC
Last seen:	Never
File type:	vbs
MIME type:	text/plain
ssdeep	3:YYGRXkZy1OKKzREopvF4/x7D/ecOGAyYdss:5WWRzRBuJ7yjGApt
TLSH	T190C02BD75F18C4B2154102C388F6DC0FC23104092A00F20048C6CAC704CAB790C4E085
Magika	vba
Reporter	JAMESWT_WT
Tags:	remoto-ddins-click vbs

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

39

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/68101/

ClamAV Detected

Detection(s):

SecuriteInfo.com.PUA.IA.Suspicious.17499538.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a16b57e5b1db29f5a485698

Tags:

autoit emotet

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/6a16b5b4099ef368af042e9b/reports/b3ef2078-0db0-4be2-a44f-0ddba2ac0dfc/overview

Hybrid Analysis HEUR_TrojanDownloader_Script_Generic

Verdict:

Suspicious

Labled as:

HEUR_TrojanDownloader_Script_Generic

Link:

https://www.hybrid-analysis.com/sample/846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

vbs

First seen:

2026-05-24T19:36:00Z UTC

Last seen:

2026-05-24T20:06:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f/results?tab=lookup

Nucleon Malprob Benign

Score:

3%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f/

Neiki Trojan-Downloader.JS.SLoad

Verdict:

Malicious

Threat:

Trojan-Downloader.JS.SLoad

Link:

https://tip.neiki.dev/file/846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-05-26 00:34:05 UTC

File Type:

Text (VBS)

AV detection:

3 of 36 (8.33%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=qrvbwhaemgizbyixvhmsz3oveapwthpnmcn4c3tvlmymfyvkrwhq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

n/a

Link:

https://tria.ge/reports/260527-k6yymahy3j/

Behaviour

Badlisted process makes network request

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.51

Link:

https://yomi.yoroi.company/submissions/846a1b1c04619190e117a9d92cedd5201f699ded609bc16e755b30c2e2aa8d8f

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/68101/