MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 cf4e81998c42ed2eba64004c76c42213d40744088e5f6cf825ee877e6882c49a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 8
| SHA256 hash: | cf4e81998c42ed2eba64004c76c42213d40744088e5f6cf825ee877e6882c49a |
|---|---|
| SHA3-384 hash: | e73b9af6aad827f8e1160170e010db50d5a98b3c49db72f2f0949a404af5567248cbe858eb79c4372522ab5edeed34ca |
| SHA1 hash: | c31e9c7a36a28966a5f77091ba74398d8ecd24e7 |
| MD5 hash: | 9b3954d8e3f79ea24ba838352b0d500d |
| humanhash: | mountain-bakerloo-ten-massachusetts |
| File name: | contactme |
| Download: | download sample |
| File size: | 351'799 bytes |
| First seen: | 2025-01-29 22:36:12 UTC |
| Last seen: | Never |
| File type: | |
| MIME type: | text/xml |
| ssdeep | 6144:QV2SXarUebCGIVJhu8x9nuTEJmluR2ewtKMaAlU7twy0WS7qkh2+H54BAg:QVreuZvf/JmmodMf08c2+Q |
| TLSH | T17D74D085DDE019856835872813DEB785EBAC09EB90D7984B3B1CC0776FF158AD3E18E1 |
| Magika | javascript |
| Reporter | |
| Tags: | js More_Eggs TA4557 |
Intelligence
File Origin
# of uploads :
1
# of downloads :
142
Origin country :
USVendor Threat Intelligence
Detection(s):
Verdict:
Malicious
Score:
81.4%
Tags:
malware
Verdict:
Suspicious
Threat level:
5/10
Confidence:
100%
Tags:
obfuscated
Verdict:
Malicious
Labled as:
Trojan.Script.Heuristic
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Multi AV Scanner detection for submitted file
Sigma detected: WScript or CScript Dropper
Behaviour
Behavior Graph:
Score:
46%
Verdict:
Susipicious
File Type:
SCRIPT
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
More_eggs
Score:
0.90
File information
The table below shows additional information about this malware sample such as delivery method and external references.
bc9117935721c09d2a73cf7c28e3d2e46835d7a22bbe4e266dda0353aa7ce8ac
js cf4e81998c42ed2eba64004c76c42213d40744088e5f6cf825ee877e6882c49a
(this sample)
Dropped by
SHA256 bc9117935721c09d2a73cf7c28e3d2e46835d7a22bbe4e266dda0353aa7ce8ac
Delivery method
Distributed via e-mail link
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.