SUSPICIOUS — virussign.com_05a5cb9d82885f092e8e02024bbb1f40.vir

SUSPICIOUS — virussign.com_05a5cb9d82885f092e8e02024bbb1f40.vir is a unknown sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (54/100), attributed to the Iframe family. 4 of 51 detection engines flagged it.

Identification

• SHA-256: a263a5669de63be3d1182c25cfa24c467d259756f5cf85196460c7da1313c4d1
• SHA-1: bf1c3a9b859e174cc64f2d11315df456ec514d14
• MD5: 05a5cb9d82885f092e8e02024bbb1f40
• ssdeep: 96:ZFH8ggG6mQ/1zfNa2TI4bNaUg44thrN2Udf2nQ78L3k0:ZFcgglmQ5l3YUHNUdf2nQcb
• TLSH: T1661B9EBCB495357C84E27634644C478631EF388C4259D82C049ABDCB4D512D94EE5F9F
• Submitted as: virussign.com_05a5cb9d82885f092e8e02024bbb1f40.vir
• File type: unknown · Size: 5272 bytes
• Verdict: suspicious (54/100) · Family: Iframe

Source: VirusSign · first seen 2026-07-09T00:00:00.000Z · SHA-256 verified

Detections (4 of 51 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:JS/Iframe.BS
• Kaspersky (KVRT): Trojan.JS.Iframe.afl
• Trellix Stinger (McAfee): JS/Blacole-Redirect.ac

Why this verdict

The suspicious score of 54/100 is the fusion of 2 weighted signals:

• Microsoft Defender flagged Trojan:JS/Iframe.BS (rule Trojan:JS/Iframe.BS) - engine signal, weight 0.55, confidence 0.85
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

More Iframe samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report