MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28
SHA3-384 hash:	b2a09164fc7c4ecc2e5addd9f173be77a01e949d5eb8b4e7a381eec26367ddd7daa643d40eb6af0cb50a2d4d90412a02
SHA1 hash:	316d58067791cd67aa87023565bae4bc73788f48
MD5 hash:	6de2d48e35895c2636caf63acca0133b
humanhash:	mississippi-network-six-king
File name:	8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28.vbs
Download:	download sample
File size:	152 bytes
First seen:	2026-05-27 09:17:58 UTC
Last seen:	Never
File type:	vbs
MIME type:	text/plain
ssdeep	3:YYGRXkZOgeELETnEB7M0NmopvF4/x7D/ecOGAyYdss:5WWETo7JfuJ7yjGApt
TLSH	T151C02B6BAF1CC4F1054112C384FAD80FC53700095E10F784C883D8C914CA3780C4E8C1
Magika	vba
Reporter	JAMESWT_WT
Tags:	remoto-ddins-click vbs

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

80

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/68104/

ClamAV Detected

Detection(s):

SecuriteInfo.com.PUA.IA.Suspicious.58497834.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a16b6e75d76862ef9483440

Tags:

autoit emotet

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/6a16b6e34bb6e36d18046f76/reports/6f121b0b-9e5a-4fc4-b183-cbe8172ee8ed/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

vbs

First seen:

2026-05-27T06:25:00Z UTC

Last seen:

2026-05-27T08:39:00Z UTC

Hits:

~10

Detections:

PDM:Trojan.Win32.Generic Trojan.JS.SAgent.sb HEUR:Trojan-Downloader.Script.Generic

Link:

https://opentip.kaspersky.com/8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28/results?tab=lookup

Nucleon Malprob Benign

Score:

10%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28/

Neiki Trojan.JS.SAgent

Verdict:

Malicious

Threat:

Trojan.JS.SAgent

Link:

https://tip.neiki.dev/file/8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rjmimztswr5ah2kedcxrox3juluto5hazial756z6gfszl6rvmua._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

n/a

Link:

https://tria.ge/reports/260527-k9thbahz2r/

Behaviour

Badlisted process makes network request

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.31

Link:

https://yomi.yoroi.company/submissions/8a58866672b47a03e94418af175f69a2e93774e0ca00bff7d9f18b2cafd1ab28

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/68104/