MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253
SHA3-384 hash: 841ecd1f7ea89a60cb30962b749ad96b0ad9f006c0ce807892bc144b791fac40dd96241f75de87ed3ecac3ad130d0655
SHA1 hash: 8f961d13054a8a80f1814441211bf998f9f4f010
MD5 hash: 72b2ae28a5d8a98225574227e1a724c2
humanhash: sodium-crazy-golf-carbon
File name:Update_22.js
Download: download sample
File size:9'075'792 bytes
First seen:2026-05-29 06:52:26 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 6144:NubnYpscE3SqA5mPYsTvQw1z8jBZlLtH+Bp89S5mfEhwpNaVwS0msFJvXiESUWjl:mPelS
TLSH T16896DFAB6DDC361D3000B1C2F48521F5EA621336DBDE12D9B8F924337AFA49AC46D746
Magika javascript
Reporter JAMESWT_WT
Tags:js

Intelligence

File Origin
# of uploads :
1
# of downloads :
108
Origin country :
IT IT
Vendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a1937dc33dfa243d40ab666
Tags:
n/a
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
repaired
Link:
https://www.filescan.io/uploads/6a1937c44bb6e36d18064fb8/reports/6de57bdb-33ec-4c46-a271-1036febd2718/overview
Verdict:
Suspicious
Labled as:
JS/TrojanDropper.Agent
Link:
https://www.hybrid-analysis.com/sample/ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253
Verdict:
Malicious
File Type:
text
First seen:
2026-05-29T04:38:00Z UTC
Last seen:
2026-05-30T23:15:00Z UTC
Hits:
~10
Detections:
HEUR:Trojan-Dropper.Script.Generic
Link:
https://opentip.kaspersky.com/ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253/results?tab=lookup
Score:
28%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253/
Verdict:
Clean
Link:
https://tip.neiki.dev/file/ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253
Threat name:
Script-JS.Packed.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-05-29 06:37:40 UTC
File Type:
Text (JavaScript)
AV detection:
9 of 24 (37.50%)
Threat level:
  1/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=745ofzzpkabxcu6jimqf6tlpvefhkz3d4fnszoff2cpyv7vqmjjq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
execution
Link:
https://tria.ge/reports/260529-hnxlqsex4x/
Behaviour
Command and Scripting Interpreter: JavaScript
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.60
Link:
https://yomi.yoroi.company/submissions/ff3ae2e72f50037153c943205f4d6fa90a756763e15b2cb8a5d09f8afeb06253

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments