MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145
SHA3-384 hash:	67cceb6655d22104498bc4da42d21d27d7281d1e20f07a45efad86e2fca0f7d2f08cba0f0cbbc3af6214984b83c83401
SHA1 hash:	ac12ba375d762fd5a71da4d07b0af722361e98bc
MD5 hash:	fe54dc924a073c8de414325dcec631a3
humanhash:	dakota-seven-triple-magazine
File name:	weneedbestdevilsystemforbettertogetback.js
Download:	download sample
Signature	PureLogsStealer Alert Create hunting rule
File size:	5'635'611 bytes
First seen:	2026-06-17 01:01:55 UTC
Last seen:	Never
File type:	js
MIME type:	text/plain
ssdeep	98304:Mi/oZk0IEf/0fR+++cOWG/IMkiKRey8Zz8TzM1faOwz4nVHCaHb4XlCV551Kc+HO:poZfIEf/K+++cOWG/IMkiKRey8Zz8TzK
Threatray	1 similar samples on MalwareBazaar
TLSH	T14946F8620394D232B324AFDD1639FD34A40E598754E9DB0036AED769323DC27A3797E2
Magika	txt
Reporter	BastianHein
Tags:	js PureLogsStealer

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

176

Origin country :

CL

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

89.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a31477254a045c34089a354

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug dropper evasive obfuscated obfuscated packed repaired

Link:

https://www.filescan.io/uploads/6a31f2261f652d686585373b/reports/58e192a8-a919-4544-b805-0d1dbc97bf0b/overview

Hybrid Analysis DR/JS.Dropper

Verdict:

Malicious

Labled as:

DR/JS.Dropper

Link:

https://www.hybrid-analysis.com/sample/f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

js

First seen:

2026-06-16T10:02:00Z UTC

Last seen:

2026-06-18T18:11:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan.Script.Generic HEUR:Trojan-Dropper.Script.Generic HEUR:Trojan-Downloader.Script.Generic

Link:

https://opentip.kaspersky.com/f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145/results?tab=lookup

Nucleon Malprob Malware

Score:

98%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145/

Neiki Family.DONUTLOADER

Verdict:

Malicious

Threat:

Family.DONUTLOADER

Link:

https://tip.neiki.dev/file/f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145

ReversingLabs TitaniumCloud Script-JS.Trojan.Cryxos

Threat name:

Script-JS.Trojan.Cryxos

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-16 09:31:51 UTC

File Type:

Binary

AV detection:

10 of 38 (26.32%)

Threat level:

  5/5

Spamhaus Hash Blocklist Malicious file

Detection(s):

Malicious file

Link:

https://check.spamhaus.org/check/?searchterm=7a3bimh2d745tdjqzzu5m37hqy7ntufzin6cg46ihzrhx6voqfcq._file

Threatray purecrypter donutloader

Verdict:

malicious

Label(s):

purecrypter

Alert

Create hunting rule

donutloader

Alert

Create hunting rule

Similar samples:

error

PureLogsStealer

Hatching Triage donutloader

Result

Malware family:

donutloader

Alert

Create hunting rule

Score:

  10/10

Tags:

family:donutloader execution loader

Link:

https://tria.ge/reports/260617-bd2pdagz7n/

Behaviour

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

Checks computer location settings

Executes dropped EXE

Detects DonutLoader

Family: DonutLoader

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.70

Link:

https://yomi.yoroi.company/submissions/f8361430fa1ff9d98d30ce69d66fe7863ed9d0b9437c2373c83e627bfaae8145