MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946
SHA3-384 hash:	0ee81e8ca6c2904ca20742cdf9dce11cf772637eee1b9fa9759f74f7db8143ac6b9010b308f73994b0e81c3a94e8f40c
SHA1 hash:	98ee9f19dcdb4779aa345519151ae9dffc69265b
MD5 hash:	c5b54597209f1298e9d4cf62dcdcd504
humanhash:	leopard-twelve-massachusetts-thirteen
File name:	DC2026572342.vbs
Download:	download sample
File size:	4'772 bytes
First seen:	2026-05-16 15:11:01 UTC
Last seen:	Never
File type:	vbs
MIME type:	text/plain
ssdeep	96:+mE5v/E8QnECIb6EJ/lLrj6JEIbljN+rm/lLrjYT:4vSIVaZD+rGa
TLSH	T128A1E8A9038E8DBEF18E0E44A89F065A31FAE84E775516451B735FDB7C3BA858033253
Magika	vba
Reporter	BastianHein
Tags:	vbs

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

51

Origin country :

CL

Vendor Threat Intelligence

ACCE Unknown

No detections

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/66126/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a07448e46d6967b3d9084df

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

encrypted evasive lolbin obfuscated rundll32 wscript

Link:

https://www.filescan.io/uploads/6a088922875badc3b387e33a/reports/66e31e46-e8d8-4859-929b-8200c846ace5/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

vbs

First seen:

2026-05-15T13:11:00Z UTC

Last seen:

2026-05-17T18:22:00Z UTC

Hits:

~100

Detections:

Trojan.JS.SAgent.sb HEUR:Trojan.VBS.SAgent.gen Trojan.VBS.SAgent.sb BSS:Trojan.Win32.Generic not-a-virus:HEUR:RemoteAdmin.Win32.Convagent.gen not-a-virus:HEUR:RemoteAdmin.Multi.Rmmagent.gen

Link:

https://opentip.kaspersky.com/f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946/results?tab=lookup

Nucleon Malprob Malware

Score:

87%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946/

Neiki RemoteAdmin.Multi.Rmmagent

Verdict:

Malicious

Threat:

RemoteAdmin.Multi.Rmmagent

Link:

https://tip.neiki.dev/file/f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946

ReversingLabs TitaniumCloud Script.Trojan.Heuristic

Threat name:

Script.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-05-15 16:06:45 UTC

File Type:

Text (VBS)

AV detection:

8 of 38 (21.05%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6gkkjqsp76qgxd4wzdudk2347fc5thu5opigvue6yuecgk62dfda._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.11

Link:

https://yomi.yoroi.company/submissions/f194a4c24fffa06b8f96c8e8356b7cf945d99e9d73d06ad09ec508232bda1946

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/66126/