MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d840602b76f862d909b65fb7d87f77df66c8cd3c3a0439837c3a0afc9eee16ce. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d840602b76f862d909b65fb7d87f77df66c8cd3c3a0439837c3a0afc9eee16ce
SHA3-384 hash:	acf21b57a77c54f1eb47358000ebea09a75e8167dfe1c099fff4f715e97f2d51cf1e0fb43e0258cc3b3da7b7757cdd2e
SHA1 hash:	29a8a8878ec583d85ec8772a877a94e829e82e31
MD5 hash:	64f416d27c1941590dd2ad4351fe132c
humanhash:	undress-hamper-tennessee-blue
File name:	paste.ee_d_vHj8XbP2_0.vbs
Download:	download sample
File size:	151'975 bytes
First seen:	2026-05-20 18:18:24 UTC
Last seen:	Never
File type:	vbs
MIME type:	text/plain
ssdeep	768:47ir+FSkH4EYjeyzyKhNVeCaBF1zujkCp3JjDSZzQPNmMEWSQJXM:7M
TLSH	T1F7E39B42362970CAC2A58B7512A3DD4DFBA19FF7FB0A7A3D9C2924DC371624147A3781
Magika	javascript
Reporter	TomU
Tags:	vbs

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

19

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a0e8fe24f2b29ce04026cba

Tags:

virus agent

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6a0e8fab861ee596e64286d8/reports/7a5ef636-a6f6-4e1d-a7c5-a8ed73643697/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2025-07-29T13:41:00Z UTC

Last seen:

2025-07-29T14:16:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/d840602b76f862d909b65fb7d87f77df66c8cd3c3a0439837c3a0afc9eee16ce/results?tab=lookup

Nucleon Malprob Benign

Score:

10%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/d840602b76f862d909b65fb7d87f77df66c8cd3c3a0439837c3a0afc9eee16ce

Malva.RE

Gathering data

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script-JS.Dropper.Boxter

Threat name:

Script-JS.Dropper.Boxter

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-30 02:04:38 UTC

File Type:

Binary

AV detection:

16 of 38 (42.11%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3bagak3w7brnscnwl635q73x35tmrtj4hicdta34hifpzhxoc3ha._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d840602b76f862d909b65fb7d87f77df66c8cd3c3a0439837c3a0afc9eee16ce