CLEAN — virussign.com_09125d5da729d557a4a06c3eab6e3700.vir

CLEAN — virussign.com_09125d5da729d557a4a06c3eab6e3700.vir is a archive sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (14/100). 3 of 53 detection engines flagged it.

Identification

• SHA-256: f402cb9d0aad41b7829ba4e793a7b9455dcb8eb8c25a84d35797e2f09a1bc7cb
• SHA-1: 6902775b535cbe1a04600879439166c307e35b90
• MD5: 09125d5da729d557a4a06c3eab6e3700
• ssdeep: 6144:x3ofrC6z79rHk9ix7MofLT8LFbXUzAGX3pwZGlBQ:NoDtz46kbkpX3pwh
• TLSH: T16543221ADC6F11BA09A5CD430E01B2F1153C80B61B232AEA3957C2179F9F62E448AD33
• Submitted as: virussign.com_09125d5da729d557a4a06c3eab6e3700.vir
• File type: archive · Size: 226532 bytes
• Verdict: clean (14/100)

Source: VirusSign · first seen 2026-08-20T00:00:00.000Z · SHA-256 verified

Detections (3 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Microsoft Defender: Trojan:Win32/Vigorf.A
• Kaspersky (KVRT): HEUR:Trojan.Script.Generic

Why this verdict

The clean score of 14/100 is the fusion of 1 weighted signal:

• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Archive contents (1 executable)

This archive carries 1 extracted member, each analyzed as its own sample:

• orden de compras.js - 7edffa93fcba4d8d8bdf792995555d16807a37993d6cb9267376d8a3dad2f8d4

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report