MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b
SHA3-384 hash:	a5bcb703a53fa17072e51cd334feba5000901a40fa2bdcfb9b7d9d204b8d0a7782bf69bea9ae3bb29b4812b3bfb05661
SHA1 hash:	fa7d631ee3e2a405c9618d7d70e1c546a5dec0f7
MD5 hash:	27965f46c2d16af746efeb8e1fc30025
humanhash:	kentucky-jig-pasta-december
File name:	8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b.js
Download:	download sample
Signature	SocGholish Alert Create hunting rule
File size:	262 bytes
First seen:	2026-03-02 06:48:25 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	6:q7X75hOEKZmgO9lDyCoRWZ/EQhj0b6pd7g6MeTbnUikUe:INhkZuD+RWZ8Qhj0b6jg43UiFe
TLSH	T1FDD02BDA3D4541250EA7147545B7EA1C70251218DC112653D8AEC9611A20BD6649AE9C
Magika	javascript
Reporter	JAMESWT_WT
Tags:	js socgholish

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

211

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69a532cc002d37d5c982956a

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

repaired socgholish

Link:

https://www.filescan.io/uploads/69a532ea10e80629d4f81bd2/reports/33fbd04b-0524-4367-933b-4a0a134b7269/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2023-06-29T13:26:00Z UTC

Last seen:

2023-07-18T15:36:00Z UTC

Hits:

~1000

Detections:

HEUR:Trojan.Script.Generic

Link:

https://opentip.kaspersky.com/8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b/results?tab=lookup

Nucleon Malprob Benign

Score:

9%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b/

Neiki Trojan.Script

Verdict:

Malicious

Threat:

Trojan.Script

Link:

https://tip.neiki.dev/file/8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b

ReversingLabs TitaniumCloud Script-JS.Trojan.Redirector

Threat name:

Script-JS.Trojan.Redirector

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-06-29 19:24:06 UTC

File Type:

Text (JavaScript)

AV detection:

9 of 23 (39.13%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=r6ew6pyll4zucmqx5e2q3otnjfmmzg67k2eqfienoonuhw3pte5q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260302-hlctjsas4h/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8f896f3f0b5f33413217e9350dba6d4958cc9bdf568902a08d739b43db6f993b