MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 5


Intelligence 5 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f
SHA3-384 hash: 9f58862499d47b7b80beaf48a70b1a98b1a97fbc7e0f4420e1120301799dcd9ecfe929e95df74238eb2c5c89d85011b3
SHA1 hash: cca609f039a1a869277348c81a57b92e53101949
MD5 hash: efbd6df9fa0d5bde29df9286fe7e8663
humanhash: alpha-island-harry-cup
File name:Granad244.js
Download: download sample
Signature AgentTesla
Create hunting rule
File size:406'600 bytes
First seen:2026-03-12 17:00:52 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 6144:Gg3qjtX76dTR5eXYWwGGBcQC1SOhfq1X8ovM7t+0RXXeUVN1x/yXgHQXRq:L3qhXXvwleTphGzSHVJyLRq
TLSH T10584CE77C83A1A17C61B3448E6491CD1CC7865EB32EA73F5B9D30E050A9B6B189F613E
Magika javascript
Reporter JAMESWT_WT
Tags:209-54-102-132 4x4--hydro-niche-com AgentTesla js tecnoruoteindustriali-it

Intelligence

File Origin
# of uploads :
1
# of downloads :
126
Origin country :
IT IT
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.79694598.5622.29678.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=69b2f16c5a439615ccbfc444
Tags:
n/a
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
obfuscated repaired
Link:
https://www.filescan.io/uploads/69b2f1642000fc76c3d70351/reports/1d8ebe48-ebf7-4493-85d5-86d7bb1d3544/overview
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f
Verdict:
Clean
File Type:
text
Link:
https://opentip.kaspersky.com/c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f/results?tab=lookup
Score:
79%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f/
Verdict:
Clean
Link:
https://tip.neiki.dev/file/c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f
Threat name:
Text.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-03-12 12:27:07 UTC
File Type:
Text
AV detection:
3 of 24 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ybrpv3e2xx6wvfu4tvdftztrpamoralkodogfd6u2sp7dchxcaxq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
execution
Link:
https://tria.ge/reports/260312-vjqzlsay8m/
Behaviour
Command and Scripting Interpreter: JavaScript
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

AgentTesla

Java Script (JS) js c062faec9abdfd6a969c9d4659e6717818e8816a70dc628fd4d49ff188f7102f

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3794712/
  
Delivery method
Distributed via web download

Comments