MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236
SHA3-384 hash: 0acf0df5d066af5d30e99c8da5ff5a3a4fc5614dbd62f58fb0a2f0da2d3dc3c3647149ead88f1a4c4910170f161fe242
SHA1 hash: 735b92f1803f975758bb61e51b1b747646d8e136
MD5 hash: 4b5c0fa791819de7b47f728601104ae1
humanhash: bacon-bluebird-magazine-earth
File name:Update_21.js
Download: download sample
File size:9'527'277 bytes
First seen:2026-05-29 06:54:00 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 6144:4ubnYpscZ3SqA5mPYsTvQw1z8jBZlLtH+Bp89S5mfsMwpNAVwS0msFJvXiESUWjf:WPDT6
TLSH T129A6CFAB6DEC361D3000B1C2F48521F5EA621336DBDE12D9B8F924337AF649AC46D746
Magika javascript
Reporter JAMESWT_WT
Tags:js

Intelligence

File Origin
# of uploads :
1
# of downloads :
126
Origin country :
IT IT
Vendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a1938b633dfa243d40ab891
Tags:
n/a
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
repaired
Link:
https://www.filescan.io/uploads/6a19389146e44aecc0c32cc5/reports/8bc5296b-a54b-4580-8918-45fd46ebbc80/overview
Verdict:
Suspicious
Labled as:
JS/TrojanDropper.Agent
Link:
https://www.hybrid-analysis.com/sample/b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236
Verdict:
Malicious
File Type:
text
First seen:
2026-05-29T04:22:00Z UTC
Last seen:
2026-05-30T23:15:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Dropper.Script.Generic
Link:
https://opentip.kaspersky.com/b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236/results?tab=lookup
Score:
28%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236/
Verdict:
Clean
Link:
https://tip.neiki.dev/file/b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236
Threat name:
Script-JS.Dropper.FakeUpdate
Create hunting rule
Status:
Malicious
First seen:
2026-05-29 06:37:51 UTC
File Type:
Text (JavaScript)
AV detection:
9 of 24 (37.50%)
Threat level:
  3/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=wtjn3jtlthwred4demqwqa22uygkol7vrxifeanrj6aytobnmi3a._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
execution
Link:
https://tria.ge/reports/260529-hqmvbaex8s/
Behaviour
Command and Scripting Interpreter: JavaScript
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.60
Link:
https://yomi.yoroi.company/submissions/b4d2dda66b99ed120f83232168035aa60ca72ff58dd05201b14f8189b82d6236

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments