MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 04869d7a12e62739665dbbdeb5284ebda8a61ed0dc186476a5781ccc4ad27d21. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 04869d7a12e62739665dbbdeb5284ebda8a61ed0dc186476a5781ccc4ad27d21
SHA3-384 hash: 2c385ad764ea12ffae157bd48d051a5372db2b4f0fea05749310f86229c7a24ca9586bd4baa3a7d79f8753d04c7faf5e
SHA1 hash: c6bfcb96f524e7170ac43a203d08fd715dd2cf2a
MD5 hash: 2986cbbbe806cc2555a3c3988e3f1dcd
humanhash: mobile-december-black-sixteen
File name:194.9.6.40_1781487659921587_vendor_phpunit_phpunit_src_Util_PHP_eval-stdin.php.bin
Download: download sample
File size:28'668 bytes
First seen:2026-06-15 02:17:09 UTC
Last seen:Never
File type:php php
MIME type:text/x-php
ssdeep 768:UumWOXcTmHBBGUUO5/sCY4kSwULlhgQXtIAUONhKk4E:Uu+ImH/GnO5/RY4kkLkONX
TLSH T165D2DF34C4D83FBDEEAA2A1C06FA6A20D7D68B1E9498860637477D9B4F37D80442751E
Magika php
Reporter Blackdome

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a2f60d0a15110463ee5e8ec
Tags:
n/a
Verdict:
Malicious
Labled as:
PHP/Kryptik.CZ trojan
Link:
https://www.hybrid-analysis.com/sample/04869d7a12e62739665dbbdeb5284ebda8a61ed0dc186476a5781ccc4ad27d21
Score:
92%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/04869d7a12e62739665dbbdeb5284ebda8a61ed0dc186476a5781ccc4ad27d21
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/04869d7a12e62739665dbbdeb5284ebda8a61ed0dc186476a5781ccc4ad27d21/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=asdj26qs4yttszs5xpplkkcoxwukmhwq3qmgi5vfpaomyswspuqq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/04869d7a12e62739665dbbdeb5284ebda8a61ed0dc186476a5781ccc4ad27d21

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments