MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1
SHA3-384 hash:	10374d654b9f56f3a11c6c2c0f0dafc61531e5f548dbd11fab5605551432270889f42e42151ee4324773a70d2b498875
SHA1 hash:	65e523c6adf2957bd898d4c429e70985268e2804
MD5 hash:	7805b0885e64e4ab56bbee1e7a42db0b
humanhash:	nitrogen-sixteen-oregon-uncle
File name:	WW.js
Download:	download sample
Signature	Quakbot Alert Create hunting rule
File size:	9'767 bytes
First seen:	2022-11-17 15:19:36 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	192:juSLjDJq0Tavgx685UIroAKbP2KTMhS0OGYm5llWVjAvNzAWMuEvk7MgG+r5A6:FVq2k785UIro8KTMhSeYm5P2jiuuEjP4
TLSH	T183125B5F3D53ECF911F37A91EDDA24F5DC1A292288622046189FFB30421C7DA6D151DB
Reporter	pr0xylife
Tags:	1668683197 BB06 js Qakbot Quakbot

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

276

Origin country :

IE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.JS.Magniber-A.6562.26126.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6376512965b4ed3de8c87f12/reports/feeaf522-1784-4f7f-9e47-d33556e48842/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Details

Base64 Encoded URL

Detected an ANSI or UNICODE http:// or https:// base64 encoded URL prefix.

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c5df8f8328103380943d8ead5345ca9fe8a9d495634db53cf9ea3266e353a3b1/

ReversingLabs TitaniumCloud Script-JS.Trojan.Magniber

Threat name:

Script-JS.Trojan.Magniber

Alert

Create hunting rule

Status:

Malicious

First seen:

2022-11-17 15:20:13 UTC

File Type:

Text (JavaScript)

AV detection:

1 of 39 (2.56%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=yxpy7azicazybfb5r2wvgrokt7uktvevmng3kphz5izgny2tuoyq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/221117-sqrhlseg48/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.