MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2
SHA3-384 hash:	f2c170032e1d0bd9dde30a90c81ba1a770832677ad8b2f5d33fddf5490bf8d0a3ab9d8ce9061fb065949cff769a962a0
SHA1 hash:	7c266b9bbf5f53d92f237659f447b33313656381
MD5 hash:	8936ad7cef5f05bcfaee50c6a991765f
humanhash:	bravo-bluebird-wyoming-charlie
File name:	contractDiscovery.js
Download:	download sample
File size:	3'736 bytes
First seen:	2026-10-01 10:38:27 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	96:SIB9YLSaMIqHvrQkSFLOzIE3ztnW3GR6IfK:JBuDqPYFLwjJW3GR6IfK
TLSH	T1BE71DA4B77F3229D0976EF81410B9C11E2D3940B224EDDD876DC3241EFF9128E9A25B4
Magika	javascript
Reporter	emilstahl
Tags:	ChainScript EtherHiding js NodeJS-RAT polygon

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

123

Origin country :

DK

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ace9b852e5d8a93d8151f0f

Tags:

n/a

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-09-22T05:40:00Z UTC

Last seen:

2026-10-02T18:31:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2/results?tab=lookup

Nucleon Malprob Benign

Score:

1%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5ffjsok2f5pthscaed3wofi2fzdewgzs27rshskj3phoqv36jlza._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/261001-mp52qaxanh/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI SNC

Threat name:

SNC

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/e94a99395a2f5f33c84020f767151a2e464b1b32d7e323c949dbcee8577e4af2