MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cf4e81998c42ed2eba64004c76c42213d40744088e5f6cf825ee877e6882c49a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments

SHA256 hash: cf4e81998c42ed2eba64004c76c42213d40744088e5f6cf825ee877e6882c49a
SHA3-384 hash: e73b9af6aad827f8e1160170e010db50d5a98b3c49db72f2f0949a404af5567248cbe858eb79c4372522ab5edeed34ca
SHA1 hash: c31e9c7a36a28966a5f77091ba74398d8ecd24e7
MD5 hash: 9b3954d8e3f79ea24ba838352b0d500d
humanhash: mountain-bakerloo-ten-massachusetts
File name:contactme
Download: download sample
File size:351'799 bytes
First seen:2025-01-29 22:36:12 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/xml
ssdeep 6144:QV2SXarUebCGIVJhu8x9nuTEJmluR2ewtKMaAlU7twy0WS7qkh2+H54BAg:QVreuZvf/JmmodMf08c2+Q
TLSH T17D74D085DDE019856835872813DEB785EBAC09EB90D7984B3B1CC0776FF158AD3E18E1
Magika javascript
Reporter k3dg3___
Tags:js More_Eggs TA4557

Intelligence


File Origin
# of uploads :
1
# of downloads :
142
Origin country :
US US
Vendor Threat Intelligence
Verdict:
Malicious
Score:
81.4%
Tags:
malware
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
obfuscated
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Multi AV Scanner detection for submitted file
Sigma detected: WScript or CScript Dropper
Behaviour
Behavior Graph:
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

bc9117935721c09d2a73cf7c28e3d2e46835d7a22bbe4e266dda0353aa7ce8ac

Java Script (JS) js cf4e81998c42ed2eba64004c76c42213d40744088e5f6cf825ee877e6882c49a

(this sample)

  
Dropped by
SHA256 bc9117935721c09d2a73cf7c28e3d2e46835d7a22bbe4e266dda0353aa7ce8ac
  
Delivery method
Distributed via e-mail link

Comments