MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8a06d0975c057a25f50d7a6ebb8740de8d12adf12cd7ae8ccde78fc29cd04b1a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8a06d0975c057a25f50d7a6ebb8740de8d12adf12cd7ae8ccde78fc29cd04b1a
SHA3-384 hash:	ea564644b8defcfd7d2e32e8fc118750eef684cb1d77b5f5a8e14a28e96355ae5b84d078ec2b1f9992dc8e277eb4181f
SHA1 hash:	c48f706f07fe4592a964826d81e4e8435a264a9f
MD5 hash:	fc3f7db8c392360fc044d51a5555282d
humanhash:	sodium-foxtrot-bravo-lion
File name:	NewXOrder#56901731.rar
Download:	download sample
File size:	128'797 bytes
First seen:	2026-06-12 21:55:10 UTC
Last seen:	2026-06-12 21:56:18 UTC
File type:	rar
MIME type:	application/x-rar
ssdeep	1536:J8dQfKduGi3cyIvqel0w9SZNn2xeGsuoI7OH/2ExV+iXmwq5rAFN99sBdL8CZEjI:a4ayvX409n0ejoF4vX/q5C9tSEjZy
TLSH	T1FFC312F841F37622C273B672E0581A6F6F9E81A0D725140E76FAA568D0B4EC04C396DB
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	rar

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

73

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	New Order#56901731.js
File size:	829'542 bytes
SHA256 hash:	2246004dbcefa75c28b2b0dde6004e5fa6427179dfb000b014e2915361ae444b
MD5 hash:	8ef7baa0c0a54f9c13bd7ff9bc89a21b
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/3d00da31-3c8c-4dd4-8b48-34b2263c8a24/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a2c8099a15110463ee5262d

Tags:

infosteal rapid

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

base64 masquerade obfuscated repaired

Link:

https://www.filescan.io/uploads/6a2c80648161ac6cb55feea9/reports/4b235492-d0b0-4183-8eb3-e46e2fb54822/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8a06d0975c057a25f50d7a6ebb8740de8d12adf12cd7ae8ccde78fc29cd04b1a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-11T03:25:00Z UTC

Last seen:

2026-06-11T03:38:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/8a06d0975c057a25f50d7a6ebb8740de8d12adf12cd7ae8ccde78fc29cd04b1a/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8a06d0975c057a25f50d7a6ebb8740de8d12adf12cd7ae8ccde78fc29cd04b1a/

ReversingLabs TitaniumCloud Script-JS.Trojan.AgentTesla

Threat name:

Script-JS.Trojan.AgentTesla

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-11 07:05:27 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

11 of 36 (30.56%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ridnbf24av5cl5inpjxlxb2a32grflprftl25dgn46h4fhgqjmna._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/8a06d0975c057a25f50d7a6ebb8740de8d12adf12cd7ae8ccde78fc29cd04b1a