MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486
SHA3-384 hash:	037f10c2557b0dcedd3587b1fc8967120244a3d966a994a08ea58b0f961bd60da99050558b4b01f4c84d329fbaeedb05
SHA1 hash:	da51a8a9177dc8914f9f4d2c0af628b3e2391afd
MD5 hash:	cd66735e5e540b3ec4f0efe41a66e9d0
humanhash:	river-fifteen-lima-wolfram
File name:	P.O #77644..JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	3'347'257 bytes
First seen:	2026-06-19 15:15:58 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:7znwFPxo/CIgCzm7148+kh3thOwLcuYlf+VNi/zEHfGVWH/b73WcFBMyvq30bd:7bwJxECIgem7K85hJcl0VNW4+MflFBIU
Threatray	402 similar samples on MalwareBazaar
TLSH	T1DDF528415BA4A5723B65DBADA13BEE30980FB01314D9CF08312EE618791CD5BA75CAF3
Magika	javascript
Reporter	James_inthe_box
Tags:	AgentTesla exe js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

184

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a355d5686bc95245bf7cff9

Tags:

virus lien blic hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug base64 dropper evasive obfuscated obfuscated packed repaired

Link:

https://www.filescan.io/uploads/6a355d4fa419cb85d28d3a89/reports/61cc3dc2-33af-42ed-99be-d2eabcff01ac/overview

Hybrid Analysis JS/TrojanDropper.Agent

Verdict:

Malicious

Labled as:

JS/TrojanDropper.Agent

Link:

https://www.hybrid-analysis.com/sample/dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-06-18T21:22:00Z UTC

Last seen:

2026-06-21T13:29:00Z UTC

Hits:

~1000

Detections:

Trojan-Downloader.JS.Cryptoload.sb PDM:Trojan.Win32.Generic HEUR:Trojan-Dropper.Script.Generic HEUR:Trojan.Script.Lubfus.gen HEUR:Trojan.Script.Generic HEUR:Trojan-Downloader.Script.Generic Trojan-Dropper.JS.SDrop.sb

Link:

https://opentip.kaspersky.com/dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486/results?tab=lookup

Nucleon Malprob Malware

Score:

95%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486

Malva.RE

Gathering data

CERT.PL MWDB agenttesla

Detection:

agenttesla

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486/

Neiki Family.AGENTTESLA

Verdict:

Malicious

Threat:

Family.AGENTTESLA

Link:

https://tip.neiki.dev/file/dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486

ReversingLabs TitaniumCloud Win32.Trojan.Egairtigado

Threat name:

Win32.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-19 03:41:08 UTC

File Type:

Text (JavaScript)

AV detection:

15 of 38 (39.47%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3qjpvjda7kvrrijnrlbt7m5dvfwjkizm74xretprkmaeoxgcasda._file

Threatray agenttesla

Verdict:

malicious

Label(s):

agenttesla

Alert

Create hunting rule

Similar samples:

153a492ed524469bc8fd9a9fcd4d0ec3215caa4b0bb1e34bd779fad17271b56a

AgentTesla

6f8c26cc1096a3d10169efc5a2eba3f0370b905b3322b839e9af3bcbad540748

AgentTesla

8be9560f26392b4e905203d1464ab7e6bb17c0091b3a346fa443867b6b9d8e41

AgentTesla

8dffead0450847a53d2c7d585aa2150acc44a4813ecbd31f0e7f6c61d7b08c05

AgentTesla

96e22da4d5c0ea4b0efde0ad3eaa8fdedc60228f84fb3c56899afbb9338da2a1

AgentTesla

9ec6a5d1bcb85ba852a1dbbbaf3f04a3ea2cc3bfa188f782fefda1a2c47288c0

AgentTesla

error

AgentTesla

+ 392 additional samples on MalwareBazaar

Hatching Triage agenttesla

Result

Malware family:

agenttesla

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla collection discovery execution keylogger spyware stealer trojan

Link:

https://tria.ge/reports/260619-snp7rsat8v/

Behaviour

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads WinSCP keys stored on the system

Reads data files stored by FTP clients

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Family: AgentTesla

VMRay AgentTesla

Malware family:

AgentTesla

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/dc12faa460fa/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.55

Link:

https://yomi.yoroi.company/submissions/dc12faa460faab18a12d8ac33fb3a3a96c95232cff2f124df15300475cc20486