MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8481b4c44ad96ef389be6d197492fddf6e99f75595c0fc653bde2c8ffc38a820. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8481b4c44ad96ef389be6d197492fddf6e99f75595c0fc653bde2c8ffc38a820
SHA3-384 hash:	17b1b5311290c07eddc4950983972953415c5ad17b5c68a2ca416089e40862f64d0596438b7750a044c58255719084bf
SHA1 hash:	bb05330e3f4dff235fbea81cac4323a3cb5e371c
MD5 hash:	a84c2c3831b0ed4b5f0e5a3cc251ca4d
humanhash:	lithium-may-network-artist
File name:	nDocumentos_de_embarque___BL_e_PL.uue
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	1'182'388 bytes
First seen:	2026-08-04 20:01:15 UTC
Last seen:	Never
File type:	uue
MIME type:	application/x-rar
ssdeep	24576:rusUvLpU48WuTYcZgha3xkvTGMv5TxGVm5gAY3jd:rbUFU48WuTYF+xgTv5Tz5LY3x
TLSH	T1724533FF8041F0247533A06BE5FA86F73192BB198C8DCE59A1E457D0D7E538D06B09A9
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	FXOLabs
Tags:	AgentTesla uue

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

85

Origin country :

US

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/c50c82af-df70-45e2-92b7-54716f2f975c/

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan-Downloader.JS.XLoader.15113.13105.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Trojan-Downloader.JS.XLoader.30199.32422.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug downloader dropper evasive obfuscated obfuscated packed repaired xloader

Link:

https://www.filescan.io/uploads/6a724525fb16314e0adf457d/reports/b8203899-a5cf-41b3-a75e-29d40042f5ae/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8481b4c44ad96ef389be6d197492fddf6e99f75595c0fc653bde2c8ffc38a820

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8481b4c44ad96ef389be6d197492fddf6e99f75595c0fc653bde2c8ffc38a820/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=qsa3jrck3fxphcn6numxjex535xjt52vsxapyzj33ywi77byvaqa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/8481b4c44ad96ef389be6d197492fddf6e99f75595c0fc653bde2c8ffc38a820