MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eb8ea776973850027c76e4cf567f68a7605b1f9d1db63d50a64b40d7a3b2e32a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	eb8ea776973850027c76e4cf567f68a7605b1f9d1db63d50a64b40d7a3b2e32a
SHA3-384 hash:	7a005c7021e8e4b9bd461cde876364a69f75a7a0fcce958b0a108bece468c59e30375bfcf88636af0260d14c43a39bf2
SHA1 hash:	c08aad261466ea6a981ceb23ba427d4065bb896b
MD5 hash:	20a1e61ca7c6a90fb95e094dbcb9f7b4
humanhash:	floor-sink-magazine-ohio
File name:	july and augst NEW ORDER.JS
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	3'469'494 bytes
First seen:	2026-07-14 09:39:16 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:ft2mi29RFCbFu6bUSnctUDc5OiUzY6+tNC9yN0hvFfrDj7m2Ctj5JWzHm26cD4na:ft2mi29RFCbFu6bUSnctUDc5OiUzY6+y
Threatray	167 similar samples on MalwareBazaar
TLSH	T180F52C4666E861637320D7D9862DEE78D40F8453382A8F4079CFD638782DE8EE6447E7
Magika	javascript
Reporter	JAMESWT_WT
Tags:	AgentTesla ftp-enogcaen-br-com js

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

108

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.31320.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a5603e056bd89099b553248

Tags:

virus lien sage blic

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug dropper evasive masquerade obfuscated obfuscated packed repaired

Link:

https://www.filescan.io/uploads/6a5603e78079de36a7fd908e/reports/ed781f78-e128-4025-b1f5-b51174447ce1/overview

Hybrid Analysis JS/TrojanDropper.Agent

Verdict:

Malicious

Labled as:

JS/TrojanDropper.Agent

Link:

https://www.hybrid-analysis.com/sample/eb8ea776973850027c76e4cf567f68a7605b1f9d1db63d50a64b40d7a3b2e32a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-07-13T21:27:00Z UTC

Last seen:

2026-07-15T07:30:00Z UTC

Hits:

~1000

Link:

https://opentip.kaspersky.com/eb8ea776973850027c76e4cf567f68a7605b1f9d1db63d50a64b40d7a3b2e32a/results?tab=lookup

Nucleon Malprob Malware

Score:

97%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/eb8ea776973850027c76e4cf567f68a7605b1f9d1db63d50a64b40d7a3b2e32a

Malva.RE

Gathering data

CERT.PL MWDB agenttesla

Detection:

agenttesla

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/eb8ea776973850027c76e4cf567f68a7605b1f9d1db63d50a64b40d7a3b2e32a/

Spamhaus Hash Blocklist Malicious file

Detection(s):

Malicious file

Link:

https://check.spamhaus.org/check/?searchterm=5ohko5uxhbiae7dw4thvm73iu5qfwh45dw3d2ufgjnanpi5s4mva._file

Threatray agenttesla

Verdict:

malicious

Label(s):

agenttesla

Alert

Create hunting rule

Similar samples:

0041750b145156664772aef035961d7723957fe70a15a1563129224106d09769

AgentTesla

6c0474d7cf20a8a8ced7f9a5a59609ee58245a9a413e73d1738dad13f85d7f2b

AgentTesla

8da9fd778e01e2089de2c8874a80489b0c42afbc3f7499f4a5e6b6cd5c1ca658

AgentTesla

b1407ede7cf6976b4d234573be97175987019fceacfd76141f4083cc731fc7f2

AgentTesla

b5c078c186f17edf92e101e8df4d49f0e89515f81ce4dbbcbb611e76417ca978

AgentTesla

d010314800912704efec2cca545328ef2eb9a97893c34271d92df69e207f4a7c

AgentTesla

e68e2cde02efea3eeaff3125e510ce5fba502d918e379ba0a1ed8f808079dc0d

AgentTesla

ebbee1d2030789e37bd47f5e1f5cac792af7c31c05a451d220e03672202c07ea

AgentTesla

efc5f23ff325be267fa80f88dbbf0abefc4f479b52a6c8b0dd4963c39f3bf177

AgentTesla

+ 157 additional samples on MalwareBazaar

Hatching Triage agenttesla

Result

Malware family:

agenttesla

Alert

Create hunting rule

Score:

  10/10

Tags:

family:agenttesla collection discovery execution keylogger spyware stealer trojan

Link:

https://tria.ge/reports/260714-lm1tjsh16m/

Behaviour

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

outlook_office_path

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Accesses Microsoft Outlook profiles

Looks up external IP address via web service

Checks computer location settings

Executes dropped EXE

Reads user/profile data of local email clients

Reads user/profile data of web browsers

Family: AgentTesla

VMRay AgentTesla

Malware family:

AgentTesla

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/eb8ea7769738/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/eb8ea776973850027c76e4cf567f68a7605b1f9d1db63d50a64b40d7a3b2e32a