MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d763fee14ccb36c0d1cd5355dfb10b26466c6be5f10fe70dc7ee3d90bf70318a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d763fee14ccb36c0d1cd5355dfb10b26466c6be5f10fe70dc7ee3d90bf70318a
SHA3-384 hash:	8d77b66eed2305684331d72a5986212dda1636336fc2b0922cdac84b8c8d73ba9d702e90f3ebea2aa3b5015b6fab77ba
SHA1 hash:	dd4ea96c9405c171e35143f0a3c8c3a60b1cb3d7
MD5 hash:	12fa13f399db8bdd530419021af842ee
humanhash:	ten-happy-pizza-virginia
File name:	1247-60720-ARMAN.js
Download:	download sample
File size:	2'167'962 bytes
First seen:	2025-12-10 07:18:33 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	24:oUoCIJFlMzhBCJURJcgT/xLczKTBpyyhyhyhyhyhyhyhyhyhyhyhyhyhyhyhyhyn:iU08BTBAm
TLSH	T151A51241F78E89A1ED3EEDE27C6EC0D8D782E2247A0B2F8D3C5250DD7A3418A091D9D4
Magika	javascript
Reporter	lowmal3
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

84

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69391ef9a675b653bd0f9edb

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

obfuscated repaired

Link:

https://www.filescan.io/uploads/69391ef2900ee247e840e2e8/reports/c93940dd-125d-4d52-93e6-10b35d73042e/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/d763fee14ccb36c0d1cd5355dfb10b26466c6be5f10fe70dc7ee3d90bf70318a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2025-12-09T01:04:00Z UTC

Last seen:

2025-12-12T04:58:00Z UTC

Hits:

~1000

Link:

https://opentip.kaspersky.com/d763fee14ccb36c0d1cd5355dfb10b26466c6be5f10fe70dc7ee3d90bf70318a/results?tab=lookup

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

evad

Score:

92 / 100

Link:

https://www.joesandbox.com/analysis/1830044

Signature

Antivirus detection for URL or domain

JScript performs obfuscated calls to suspicious functions

Multi AV Scanner detection for submitted file

Sigma detected: Script Initiated Connection to Non-Local Network

Sigma detected: WScript or CScript Dropper

System process connects to network (likely due to code injection or exploit)

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Yara detected Generic JS Downloader

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

2%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/d763fee14ccb36c0d1cd5355dfb10b26466c6be5f10fe70dc7ee3d90bf70318a

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

1 match(es)

Link:

https://app.malva.re/file/12fa13f399db8bdd530419021af842ee

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d763fee14ccb36c0d1cd5355dfb10b26466c6be5f10fe70dc7ee3d90bf70318a/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=25r75ykmzm3mbuonknk57milezdgy27f6eh6odoh5y6zbp3qggfa._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

execution

Link:

https://tria.ge/reports/251210-h5np6awmdx/

Behaviour

Command and Scripting Interpreter: JavaScript

Badlisted process makes network request

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.51

Link:

https://yomi.yoroi.company/submissions/d763fee14ccb36c0d1cd5355dfb10b26466c6be5f10fe70dc7ee3d90bf70318a