MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e6aa745515463388b9fcf7ad694ecec17c12cf4bf622412e847817e85e48c041. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e6aa745515463388b9fcf7ad694ecec17c12cf4bf622412e847817e85e48c041
SHA3-384 hash:	4424ed688d6a0c64bd5ec08c5a0b2858b89fa2cf447eb7c054af6211e92620303ed5ed7582d42223d23e152b58c66866
SHA1 hash:	0c0c69335734a315a49103e7252ae9d872289e30
MD5 hash:	c1c1c5b2a76a3d463cb4f7c22c88bbe5
humanhash:	maryland-earth-fruit-mountain
File name:	crudRoutes.js
Download:	download sample
File size:	6'154 bytes
First seen:	2024-03-23 07:32:18 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	192:6s2J2i0Icwh3EIKMdAzr9K88rt+LbWWbn3bC4WHBzBzyK:pyrcEUIXtNWiDzyK
TLSH	T15FC1E773A3FD62951BF104C8893E843AD247ADE5347686C7F6AD5E4323C34A528B27E4
Reporter	likeastar20
Tags:	js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

321

Origin country :

RO

Vendor Threat Intelligence

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/65fe85af7e414bfaaebd2916/reports/38c602e4-24e9-4fac-a5f3-83ae1c559fae/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/e6aa745515463388b9fcf7ad694ecec17c12cf4bf622412e847817e85e48c041

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

n/a

Score:

22 / 100

Link:

https://www.joesandbox.com/analysis/1414397

Signature

Sigma detected: WScript or CScript Dropper

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Benign

Score:

5%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e6aa745515463388b9fcf7ad694ecec17c12cf4bf622412e847817e85e48c041

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e6aa745515463388b9fcf7ad694ecec17c12cf4bf622412e847817e85e48c041/

ReversingLabs TitaniumCloud Script-JS.Dropper.BeaverTail

Threat name:

Script-JS.Dropper.BeaverTail

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-03-21 20:28:53 UTC

File Type:

Text (JavaScript)

AV detection:

2 of 38 (5.26%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=42vhiviviyzyrop466wwstwoyf6bft2l6yrecluepal6qxsiybaq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/240323-jdhv9shc4z/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e6aa745515463388b9fcf7ad694ecec17c12cf4bf622412e847817e85e48c041