MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b033f629adb83b975dab222024e4bdaf4b43fc9298cf6784e95c8edd17090272. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b033f629adb83b975dab222024e4bdaf4b43fc9298cf6784e95c8edd17090272
SHA3-384 hash:	90c17afdaa37d9af533a1238041c37942a9270069855802691ecce281c14b774d6ea0f532724e8d0c2abf2434b9a89a5
SHA1 hash:	cc34322e67674ab88a83a73f9d784f75f9386818
MD5 hash:	748be7b5e15f9212bf6933fa66025e10
humanhash:	uncle-chicken-spring-mexico
File name:	RequestXForXQuotation-1100439650.rar
Download:	download sample
Signature	MassLogger Alert Create hunting rule
File size:	597'053 bytes
First seen:	2026-07-03 17:54:35 UTC
Last seen:	2026-07-03 18:00:30 UTC
File type:	rar
MIME type:	application/x-rar
ssdeep	12288:eFS57Zi+2eKhFhb0RFkWsBLG80f+Np+BnUvLOneayFFzJmlFWV:f57Zb2eqFhbt5o80f+Np+Bnmqea8FzJn
TLSH	T160C423A623A335AE811473C30B5AD8A534245B4BEF9FF5A79D27C8174E40B8ECDF6910
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	MassLogger rar

Intelligence

---

File Origin

# of uploads :

4

# of downloads :

44

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	Request For Quotation-1100439650.js
File size:	4'268'234 bytes
SHA256 hash:	69fc532c3a846f346f4e800b743c1a341bd73f2bab0cfd94d88a0a34a39446b3
MD5 hash:	8ddbb0c287e3a3cc82f6a7210b63721e
MIME type:	text/plain
Signature	MassLogger

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/1e8e5cc9-a44d-47ed-8d47-cebc0b5ad860/

ClamAV Detected

Detection(s):

SecuriteInfo.com.JS.Obfus-2662.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a33fe4d1548daf709f79d13

Tags:

agenttesla stration shell virus

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

conhost powershell repaired

Link:

https://www.filescan.io/uploads/6a47f7d83ffd795b792d0287/reports/ce7018f2-89a1-4090-b0ce-198f4deb95c9/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/b033f629adb83b975dab222024e4bdaf4b43fc9298cf6784e95c8edd17090272

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-18T13:38:00Z UTC

Last seen:

2026-06-20T04:29:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b033f629adb83b975dab222024e4bdaf4b43fc9298cf6784e95c8edd17090272/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b033f629adb83b975dab222024e4bdaf4b43fc9298cf6784e95c8edd17090272/

ReversingLabs TitaniumCloud Script-JS.Trojan.Redirector

Threat name:

Script-JS.Trojan.Redirector

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-18 14:25:00 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

21 of 36 (58.33%)

Threat level:

  5/5

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b033f629adb83b975dab222024e4bdaf4b43fc9298cf6784e95c8edd17090272