MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f
SHA3-384 hash:	2fd85b67a1079c98566933849430f63fd704d767ccbcc180a742c803bd032893d81a233f76604ea3a346b3f386870f55
SHA1 hash:	e90f67f63982045d7371bbb31ea4ef952d207b1a
MD5 hash:	195f779d1623e527292de79dadeb28fd
humanhash:	fifteen-utah-lactose-pip
File name:	e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f.js
Download:	download sample
File size:	9'053 bytes
First seen:	2026-03-17 11:10:43 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	192:vVUKver3EoUvMCiK9hadhXB8a02OQQtp+lp:vV6EoUkCn9kHZ023lp
TLSH	T13312821D21EBB0610553B00EBB862679B07965B37F9281167C6D81724FE2E92F7B31E0
Magika	javascript
Reporter	JAMESWT_WT
Tags:	46-62-197-232 94-156-170-255 js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

128

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b936d688c80c01586b1776

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/69b936d4493cb7d62d01d99c/reports/549c53c8-8a32-4662-a93a-38a95d728483/overview

Hybrid Analysis TR/HTML.FakeCaptch

Verdict:

Suspicious

Labled as:

TR/HTML.FakeCaptch

Link:

https://www.hybrid-analysis.com/sample/e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

js

Link:

https://opentip.kaspersky.com/e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f

ReversingLabs TitaniumCloud Document-HTML.Malware.FakeCaptcha

Threat name:

Document-HTML.Malware.FakeCaptcha

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-03-02 11:36:58 UTC

File Type:

Text (JavaScript)

AV detection:

1 of 36 (2.78%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5gmhi7jfew2y44btqtnuik2n2435wwawqufvecqaeuhsbvxczzpq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

execution

Link:

https://tria.ge/reports/260317-nac8tsay4x/

Behaviour

Command and Scripting Interpreter: JavaScript

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e998747d2525b58e703384db442b4dd737db5816850b520a00250f20d6e2ce5f