MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ad2dfa432c175b7bad0b73fad45943c472d10ef0c7cf2e3e7d34567fd5f10ba1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ad2dfa432c175b7bad0b73fad45943c472d10ef0c7cf2e3e7d34567fd5f10ba1
SHA3-384 hash:	a8ae4e70ddd755af801eb368724823d4123c4e2681c910f396d2f64b1722c193677fc1eb4c28f4a835ec835aeb650d3a
SHA1 hash:	d6263f28151c411b3c0a713417c98f24c00e501a
MD5 hash:	3c781679d00446c6f674da51ae62d991
humanhash:	carpet-charlie-finch-video
File name:	conf.txt
Download:	download sample
Signature	SmartLoader Alert Create hunting rule
File size:	242'921 bytes
First seen:	2025-03-17 10:55:06 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	6144:xEo0xM5+VPdjNP5a2D9vpQH1r8wkKic6sG:u/d4HFMcpG
TLSH	T1643429D07EEC27C7D6F956C7E9668CE0113E39A5C982385A090EF2F8718078D9529E73
Magika	txt
Reporter	tcains1
Tags:	js lua SmartLoader

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

105

Origin country :

US

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67d889ba3962f1a6f4726a21

Tags:

malware

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/67d7ff9401edd28374b20a7b/reports/676c7c87-ed41-46fd-9f26-26c87f0ca70f/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/ad2dfa432c175b7bad0b73fad45943c472d10ef0c7cf2e3e7d34567fd5f10ba1

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1640904

Signature

Sigma detected: Cscript/Wscript Uncommon Script Extension Execution

Sigma detected: WScript or CScript Dropper

Uses an obfuscated file name to hide its real file extension (double extension)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/ad2dfa432c175b7bad0b73fad45943c472d10ef0c7cf2e3e7d34567fd5f10ba1

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ad2dfa432c175b7bad0b73fad45943c472d10ef0c7cf2e3e7d34567fd5f10ba1/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vuw7uqzmc5nxxlilop5niwkdyrzncdxqy7hs4pt5grlh7vprboqq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ad2dfa432c175b7bad0b73fad45943c472d10ef0c7cf2e3e7d34567fd5f10ba1