MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d
SHA3-384 hash:	f8a73181113c2dac8b4cbe7d5b6a2203a5f28daa20b4bfdbd7c5658256b6ba88dcc813615038ee9fee3588164877eb41
SHA1 hash:	91bbb40938cd4e33e9159f8f5aa3b33e72fbf9db
MD5 hash:	e450439d2cfd366545c0115fdc4ac9ee
humanhash:	missouri-shade-cat-nevada
File name:	9sd9fd0809g7sd8f789g73438g97dsf8g798s7df98g.js
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	4'279'762 bytes
First seen:	2026-03-02 10:56:09 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:9n+1WwXNFadmBfRg2eUriuy42bw2gAwxINUl4AaiBTQpn8JkZKp2W8ETkf+Elh+e:41Z9FsgRgzxDE2gAuqBiBkpn8JkZSb8b
Threatray	3'673 similar samples on MalwareBazaar
TLSH	T17B164B48ED4497842F23CF357B6071D14392786B7D4A9A82E02BDDB2BFB3199AD25D30
Magika	javascript
Reporter	JAMESWT_WT
Tags:	192-3-176-231 AgentTesla bot8747049877 js Spam-ITA

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

252

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.PUA.JS.Obfus-2525.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69a56ce1002d37d5c982a53d

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

aes agenttesla anti-vm anti-vm base64 base64 crypto evasive evasive fingerprint hacktool infostealer obfuscated obfuscated powershell reconnaissance repaired windows

Link:

https://www.filescan.io/uploads/69a56cd1c58f45aa750fbcf5/reports/6b31a268-8956-42da-ac31-e8083e854837/overview

Hybrid Analysis JS/Agent.DLR

Verdict:

Suspicious

Labled as:

JS/Agent.DLR

Link:

https://www.hybrid-analysis.com/sample/e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

Detections:

HEUR:Trojan.Script.Generic Trojan-Downloader.JS.SLoad.sb Trojan.PowerShell.AmsiBypass.sb Trojan.JS.SAgent.sb PDM:Trojan.Win32.Generic HEUR:Trojan.PowerShell.Tesre.sb

Link:

https://opentip.kaspersky.com/e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d/results?tab=lookup

Nucleon Malprob Malware

Score:

97%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d/

Neiki Trojan.Script

Verdict:

Malicious

Threat:

Trojan.Script

Link:

https://tip.neiki.dev/file/e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4jbmmgcmr3b7cedt4y4phpazf7u4tkd2zuaekwkggpedts3shkoq._file

Threatray agenttesla

Verdict:

malicious

Label(s):

agenttesla

Alert

Create hunting rule

Similar samples:

2dfc505ca30d1a766520422bae06186f571edd5e6e19fec0659c29cb09b3d88e

AgentTesla

3062315c6e099f9e702202e0e126244dc8fe8bc019867646536914a72eb27fbc

AgentTesla

a9707d2b6808a2b42efae1293055ca6bee67f41dc475286e782cd9dd4212a3e6

AgentTesla

c736b96ac9ad292a9a13f0c3d744c5e8baac331e2d21071eae0f66cd1bdaedf8

AgentTesla

d5501def3edbda9b7bf9036cb9d120811dd1456a694e3a0098b38563ba361d51

AgentTesla

dbecf6e2bad4b37d6d724a33c84bd1826dbd4f6eb0c490ef152b261c67edc751

AgentTesla

error

AgentTesla

+ 3'663 additional samples on MalwareBazaar

Hatching Triage agenttesla

Result

Malware family:

agenttesla

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla execution keylogger spyware stealer trojan

Link:

https://tria.ge/reports/260302-m1yf1sdt3e/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

Command and Scripting Interpreter: PowerShell

Checks computer location settings

AgentTesla

Agenttesla family

Malware Config

C2 Extraction:

https://api.telegram.org/bot8747049877:AAEWVgFONiQJBBqfuvj5ARpQ5i_l9-B3HNc/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d