MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 deb4dde5ad7818624798f25e3f73a4487901c290ec66ed8f30e2dbcaca3ed5e8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	deb4dde5ad7818624798f25e3f73a4487901c290ec66ed8f30e2dbcaca3ed5e8
SHA3-384 hash:	1c4cf8915f45e5f587389fb72cc5a2a16728e452b42f5551f7243627e9a1082bc031a8e282929919f457ea2b7f2790b4
SHA1 hash:	c47bb2763f9efbef894f037703ef19c2c489d590
MD5 hash:	bada1f3b0228ce17867b7c55d9a6d3cb
humanhash:	yellow-stairway-seven-artist
File name:	paste.ee_d_FrMgJVFv_0.vbs
Download:	download sample
File size:	143'157 bytes
First seen:	2026-05-20 18:20:31 UTC
Last seen:	Never
File type:	vbs
MIME type:	text/plain
ssdeep	192:rvPWi5QPRmUvp8LQFQ8aSZsPqFBj6t7p5lfF9+ORY9ukEwTQwQJ+NXaX9TA2a:jeaE/QwQJX9TA7
TLSH	T191E3AEB89B8878440295D7BA46B97C4847AD1A400E2EBFC35F79F34F17A30D892E9D35
Magika	javascript
Reporter	TomU
Tags:	vbs

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

27

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a0e8fe64f2b29ce04026cc3

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6a0e8fb1efbd399b39c15097/reports/adfa9a0f-3f80-478d-81d6-fb7a0650efcb/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2025-07-15T18:50:00Z UTC

Last seen:

2025-07-28T16:17:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/deb4dde5ad7818624798f25e3f73a4487901c290ec66ed8f30e2dbcaca3ed5e8/results?tab=lookup

Nucleon Malprob Benign

Score:

14%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/deb4dde5ad7818624798f25e3f73a4487901c290ec66ed8f30e2dbcaca3ed5e8

Malva.RE

Gathering data

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Script-JS.Dropper.Boxter

Threat name:

Script-JS.Dropper.Boxter

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-07-15 21:00:58 UTC

File Type:

Binary

AV detection:

16 of 38 (42.11%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=322n3znnpamger4y6jpd645ejb4qdquq5rto3dzq4ln4vsr62xua._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/deb4dde5ad7818624798f25e3f73a4487901c290ec66ed8f30e2dbcaca3ed5e8