MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3
SHA3-384 hash:	5acedcfd634fd35e0401dd8594b34acee53a50f3db6c66a36a93d3b5525403b7755756498420a1e2a33334af09fc3026
SHA1 hash:	6020e2705d0c9fb9adf927b50384579f891e7790
MD5 hash:	72824a7ee0c1c8879d90a4bb495adeb1
humanhash:	saturn-paris-ten-king
File name:	Swift_00023140k$_(1).js
Download:	download sample
File size:	73'074 bytes
First seen:	2026-06-06 18:42:24 UTC
Last seen:	2026-06-08 14:48:49 UTC
File type:	js
MIME type:	text/plain
ssdeep	192:cEEg05ad1Q01R2YsoPFnSQenLbo6WGUa/NJZwxlYuyEIUO28AEJQSumSRPA9Dzr4:T05s1NSBfdJAWyOvQSuZPADzZ60y
TLSH	T1546315E3A204960F99C5244EB67F3AC5E3872946805232F857E544EFFBFE5210DB9392
Magika	javascript
Reporter	TomU
Tags:	js

Intelligence

---

File Origin

# of uploads :

5

# of downloads :

134

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Other.Malware-gen.24181492.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

91.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a20503657b7bf261d609cd9

Tags:

obfuscate xtreme shell

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-vm fingerprint repaired

Link:

https://www.filescan.io/uploads/6a246a25099ef368af23fad1/reports/63e83f1c-a7f4-4245-bfbd-d1b9fca0de1b/overview

Hybrid Analysis SVM:TrojanDownloader/JS.MalBehav.gen

Verdict:

Malicious

Labled as:

SVM:TrojanDownloader/JS.MalBehav.gen

Link:

https://www.hybrid-analysis.com/sample/cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-06-03T06:36:00Z UTC

Last seen:

2026-06-08T13:44:00Z UTC

Hits:

~1000

Detections:

Trojan.PowerShell.Agent.sb Trojan.JS.SAgent.sb HEUR:Trojan.Script.Generic

Link:

https://opentip.kaspersky.com/cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3/results?tab=lookup

Nucleon Malprob Malware

Score:

97%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3/

Neiki Family.FORMBOOK

Verdict:

Malicious

Threat:

Family.FORMBOOK

Link:

https://tip.neiki.dev/file/cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3

ReversingLabs TitaniumCloud Script-JS.Backdoor.FormBook

Threat name:

Script-JS.Backdoor.FormBook

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-03 13:41:47 UTC

File Type:

Text (JavaScript)

AV detection:

16 of 38 (42.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zmxcjmvzlzjqo3fiqz53cb2onumbjqqoxpvfsewgea6nh3lggpbq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  10/10

Tags:

execution

Link:

https://tria.ge/reports/260606-xcnxsabz3p/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Command and Scripting Interpreter: JavaScript

Command and Scripting Interpreter: PowerShell

Badlisted process makes network request

Process spawned unexpected child process

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/cb2e24b2b95e53076ca8867bb1074e6d1814c20ebbea5912c6203cd3ed6633c3