MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfa60becadac44be08d830eaf41e247ea1c58746a21fdd3c176cb99d7b919591. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dfa60becadac44be08d830eaf41e247ea1c58746a21fdd3c176cb99d7b919591
SHA3-384 hash:	b7502007c74b1dbd757e481c86d78476cf11c5c4b78f91cfd1b7e9b6b22c7be446af71ee5843a9a2e273c3141dd74491
SHA1 hash:	4705c2337e122514366a21ab138c6078886fd69b
MD5 hash:	fc9f569e35d88a670303b74a8c8e2d14
humanhash:	ink-robert-wolfram-pluto
File name:	Activity_List.js
Download:	download sample
File size:	2'585'838 bytes
First seen:	2026-03-11 07:52:30 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	3072:Hy1eLobbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbP:Hy
TLSH	T107C580710E56E5E8D5289F0FDEB057221368216FE845CE6A33408F8DDB609D91E3BEE1
Magika	javascript
Reporter	abuse_ch
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

108

Origin country :

SE

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b11f6de41a5a09993204cf

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

repaired

Link:

https://www.filescan.io/uploads/69b11f6bc58f45aa7510b6f2/reports/33f2b8f3-5df4-46eb-90ff-28b88df4d3e3/overview

Hybrid Analysis Trojan/JS.Agent

Verdict:

Malicious

Labled as:

Trojan/JS.Agent

Link:

https://www.hybrid-analysis.com/sample/dfa60becadac44be08d830eaf41e247ea1c58746a21fdd3c176cb99d7b919591

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

Detections:

HEUR:Trojan.Script.Generic

Link:

https://opentip.kaspersky.com/dfa60becadac44be08d830eaf41e247ea1c58746a21fdd3c176cb99d7b919591/results?tab=lookup

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

n/a

Score:

22 / 100

Link:

https://www.joesandbox.com/analysis/1881683

Signature

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/dfa60becadac44be08d830eaf41e247ea1c58746a21fdd3c176cb99d7b919591/

Neiki Trojan.Script

Verdict:

Malicious

Threat:

Trojan.Script

Link:

https://tip.neiki.dev/file/dfa60becadac44be08d830eaf41e247ea1c58746a21fdd3c176cb99d7b919591

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-03-11 07:53:17 UTC

File Type:

Binary

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=36tax3fnvrcl4cgygdvpihrep2q4lb2guip52paxns4z264rswiq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260311-jq3q7sgz31/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/dfa60becadac44be08d830eaf41e247ea1c58746a21fdd3c176cb99d7b919591