MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f3558f260e576e45fe299419e3e4198473d5795980b07a78cf0cb04953caccc9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f3558f260e576e45fe299419e3e4198473d5795980b07a78cf0cb04953caccc9
SHA3-384 hash: 89ea88fb2f1dc5958b3279bb12533f1462939a47f2778b47b0590e68ab345f59fd6205350a2d2d52f3004f7fba5f1249
SHA1 hash: e68b3620d30ea797a7657fc01c88cd07d60ac1b1
MD5 hash: 3d737ca69e426621e0e76eef32b07b77
humanhash: louisiana-saturn-purple-oranges
File name:model_ip_security_agreement 41376.js
Download: download sample
File size:292'945 bytes
First seen:2022-05-11 01:31:57 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 6144:lJshNVlG+TCtlFhTeeKpDcYmD2zK8J0JEjPx+WK+978Fyw48L/dC0Y2NzIPfTIY4:VODcYmD4y0Px+WK+978FyqLn+PfNA+up
TLSH T1EA54B4D9F78D112E423231AAAC2E12CDB77CD171560458AEFD4D597C24A083D83BAF7A
Reporter malwarelabnet
Tags:js

Intelligence

File Origin
# of uploads :
1
# of downloads :
431
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.JS.Dropper-AAFBTrj.30728.21700.UNOFFICIAL
Create hunting rule

Verdict:
No Threat
Threat level:
  2/10
Confidence:
100%
Tags:
control.exe expand.exe replace.exe update.exe
Link:
https://www.filescan.io/uploads/627b1256b119a5f609b9328c/reports/17ec3211-0c7f-497a-9882-39cc3ab116cd/overview
Result
Verdict:
UNKNOWN
Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
48 / 100
Link:
https://www.joesandbox.com/analysis/991574
Signature
System process connects to network (likely due to code injection or exploit)
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f3558f260e576e45fe299419e3e4198473d5795980b07a78cf0cb04953caccc9/
Threat name:
Script-JS.Trojan.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2022-05-11 01:32:06 UTC
File Type:
Text (JavaScript)
AV detection:
2 of 41 (4.88%)
Threat level:
  2/5
Result
Malware family:
n/a
Score:
  8/10
Tags:
n/a
Link:
https://tria.ge/reports/220511-bxyrtsehfj/
Behaviour
Blocklisted process makes network request
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.60
Link:
https://yomi.yoroi.company/submissions/f3558f260e576e45fe299419e3e4198473d5795980b07a78cf0cb04953caccc9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments