🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c2bab0ab4f5bc7540e694e206dbbafb8a67cfc774271e549adbf133e8406336c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: c2bab0ab4f5bc7540e694e206dbbafb8a67cfc774271e549adbf133e8406336c
SHA3-384 hash: ea7bde418eada78d9537ea3165bbc6df49161fee552bf7944addd0526af488f857c6e5a78ed7557435e1a25653987e5f
SHA1 hash: c76423bf15197482b67de45bae33a3bdc518505e
MD5 hash: 2f9c87b68624106ce465081bacaac811
humanhash: two-six-solar-twelve
File name:c2bab0ab4f5bc7540e694e206dbbafb8a67cfc774271e549adbf133e8406336c
Download: download sample
File size:862 bytes
First seen:2026-11-15 14:00:10 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 12:sBDj0DMD6OvmwfDAhzRnkzVOfstOlCQ3FBi58ny73sJCgcgWYPSw/OV9Wb6Igxln:ETsBRnkzwh1yDYtKw/OX66I+n
TLSH T1E8112FF6AC077E18B866B10861D800821A10D1CA7624CADB5343490E4A0EAFAFA84B1D
Magika javascript
Reporter c2hunter
Tags:js wraith

Intelligence


File Origin
# of uploads :
1
# of downloads :
98
Origin country :
US US
Vendor Threat Intelligence
No detections
Verdict:
Unknown
Threat level:
  2.5/10
Confidence:
100%
Tags:
base64 repaired
Result
Threat name:
n/a
Detection:
suspicious
Classification:
n/a
Score:
21 / 100
Signature
Sigma detected: WScript or CScript Dropper
Behaviour
Behavior Graph:
Gathering data
Gathering data
Result
Malware family:
n/a
Score:
  3/10
Tags:
execution
Behaviour
Command and Scripting Interpreter: JavaScript
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments