MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a78a2e98c81648ecd2ad2e3f877e8a1993e75202b03126f85d9d890d1a389c6a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a78a2e98c81648ecd2ad2e3f877e8a1993e75202b03126f85d9d890d1a389c6a
SHA3-384 hash:	0a5724a0e6f7b29f6c7e84a11212f7569e3a9a4f652f5d157c91342091fcfe1f218917e7a40a1e827a176be638f23a10
SHA1 hash:	a27497bf087ba3e729d544d1cccd79221b2c162e
MD5 hash:	4689eba8ca01eab88b763b1d43646fc7
humanhash:	triple-alpha-lithium-mockingbird
File name:	a78a2e98c81648ec.js
Download:	download sample
File size:	7'877 bytes
First seen:	2026-10-20 01:11:36 UTC
Last seen:	Never
File type:	js
MIME type:	application/javascript
ssdeep	192:KkRLV1s5VXARncRnOo10gtPSL5fEq7mUOUhh5reIzcAprixeY4HVH4BWVRkv:KCLV1s5tARncRnOo10gtPe7mUOeRlcAa
TLSH	T1C7F1D84AB052B77D12B555B6D64EBE44305633ACCDD50080F6E2C23F9EDAE9392A3E48
Magika	javascript
Reporter	Tuxxin
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

167

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.JS.Trojan.Cryxos.16527.74111269.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad6bffe5a22ac805bd80445

Tags:

n/a

Hybrid Analysis Trojan.Cryxos.JS

Verdict:

Malicious

Labled as:

Trojan.Cryxos.JS

Link:

https://www.hybrid-analysis.com/sample/a78a2e98c81648ecd2ad2e3f877e8a1993e75202b03126f85d9d890d1a389c6a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-10-19T23:25:00Z UTC

Last seen:

2026-10-19T23:33:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/a78a2e98c81648ecd2ad2e3f877e8a1993e75202b03126f85d9d890d1a389c6a/results?tab=lookup

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1989119

Signature

Multi AV Scanner detection for submitted file

Potential obfuscated javascript found

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

17%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/a78a2e98c81648ecd2ad2e3f877e8a1993e75202b03126f85d9d890d1a389c6a

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a78a2e98c81648ecd2ad2e3f877e8a1993e75202b03126f85d9d890d1a389c6a/

ReversingLabs TitaniumCloud Script-JS.Trojan.Cryxos

Threat name:

Script-JS.Trojan.Cryxos

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-10-20 01:12:34 UTC

File Type:

Text (JavaScript)

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=u6fc5ggiczeozuvnfy7yo7ukdgj6ouqcwaysn6c5tweq2grytrva._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261020-bkrsraf14n/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/a78a2e98c81648ecd2ad2e3f877e8a1993e75202b03126f85d9d890d1a389c6a