MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cc85b0eba36b19d3ca7e5c41fb8723ecdeb1fa058760854b960b987a5eef5f25. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cc85b0eba36b19d3ca7e5c41fb8723ecdeb1fa058760854b960b987a5eef5f25
SHA3-384 hash:	3acc404e82e64e59210c52105dadd6fce6f6e3fa3c6f89ee522a50141a729ff5d39af85089540662e3b94bfc1e145c3a
SHA1 hash:	6a0167ea19c2a3187c82eb3084f9b2fb3b9e9095
MD5 hash:	ce39855edd899c4efc2d67bc53829183
humanhash:	bacon-bravo-river-purple
File name:	ADVANTEK - HAIL & GHASHA - 詢價單 - 產品開發項目 (PKG 1) - GOP03260803-01.js
Download:	download sample
File size:	31'117 bytes
First seen:	2026-06-09 18:10:39 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	384:TpWdqAVuBkg2/jRHQ7qk00jsm9dw4+LiFbvHT0UUwr5+5qSFb0COIBiLEhC74PO:Tpa7uBcNHkqk0wBfwyN0ycxF4TN774G
TLSH	T1A8D2B4CA3BC2F8705722E43F392BB0A7E52A5C84B7094295FB35B0A9F95C328C574759
Magika	javascript
Reporter	abuse_ch
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

99

Origin country :

SE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.32424.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

91.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a285750a15110463ee45689

Tags:

phishing small

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

evasive obfuscated repaired

Link:

https://www.filescan.io/uploads/6a28574c8161ac6cb55e069b/reports/27fc02d0-969d-4a61-9574-10ddc7401cf1/overview

Hybrid Analysis GT:JS.Acsogenixx.4194

Verdict:

Malicious

Labled as:

GT:JS.Acsogenixx.4194

Link:

https://www.hybrid-analysis.com/sample/cc85b0eba36b19d3ca7e5c41fb8723ecdeb1fa058760854b960b987a5eef5f25

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-06-07T22:13:00Z UTC

Last seen:

2026-06-09T23:51:00Z UTC

Hits:

~100

Detections:

HEUR:Trojan-Downloader.Script.Generic Trojan.PowerShell.Cobalt.sb Trojan.JS.SAgent.sb Trojan-Spy.Noon.HTTP.ServerRequest Trojan-Downloader.Agent.HTTP.C&C PDM:Trojan.Win32.Generic Trojan-Downloader.JS.SLoad.sb HEUR:Trojan.Script.Generic

Link:

https://opentip.kaspersky.com/cc85b0eba36b19d3ca7e5c41fb8723ecdeb1fa058760854b960b987a5eef5f25/results?tab=lookup

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

72 / 100

Link:

https://www.joesandbox.com/analysis/1925345

Signature

Multi AV Scanner detection for submitted file

Potential obfuscated javascript found

Sigma detected: Script Initiated Connection to Non-Local Network

Sigma detected: WScript or CScript Dropper

System process connects to network (likely due to code injection or exploit)

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

97%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/cc85b0eba36b19d3ca7e5c41fb8723ecdeb1fa058760854b960b987a5eef5f25

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cc85b0eba36b19d3ca7e5c41fb8723ecdeb1fa058760854b960b987a5eef5f25/

ReversingLabs TitaniumCloud Script-JS.Trojan.Acsogenixx

Threat name:

Script-JS.Trojan.Acsogenixx

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-08 05:36:03 UTC

File Type:

Text (JavaScript)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zsc3b25dnmm5hst6lra7xbzd5tpld6qfq5qiks4wbomhuxxpl4sq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

execution

Link:

https://tria.ge/reports/260609-wsqkwagt4j/

Behaviour

Command and Scripting Interpreter: JavaScript

Badlisted process makes network request

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/cc85b0eba36b19d3ca7e5c41fb8723ecdeb1fa058760854b960b987a5eef5f25