MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da
SHA3-384 hash: 774f666101fb651e3059f348114a7339296e6ac6d63d4c1cace09d43b15490cf19a8cc8f481512ebd3c3c7d5576cce74
SHA1 hash: 6b12d24f4f183e419164a646d50a6b867b6d3aa1
MD5 hash: 2c2d0f8a8e30cfa1bc59d758991b09dc
humanhash: butter-lithium-twelve-fanta
File name:security-headers-manager-89d089.php
Download: download sample
File size:1'460 bytes
First seen:2026-08-08 12:56:11 UTC
Last seen:Never
File type:php php
MIME type:text/x-php
ssdeep 24:PnbY1z2fEhv0eLQqaTeRH8eB/tcLRL15LW3q6DgOpB:PCz2fEa9eFjNyNL15LWFDpB
TLSH T12631DED5F50C3929FCE594DA9A5EBF1062A20307D2222FD18C65825DC83C28B71BAD69
TrID 62.5% (.PHP) PHP source (5000/1)
37.5% (.HTML) HyperText Markup Language (3000/1/1)
Magika php
Reporter bstnbuck
Tags:backdoor php

Intelligence

File Origin
# of uploads :
1
# of downloads :
51
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
backdoor
Link:
https://www.filescan.io/uploads/6a772777bc1e26718e79547c/reports/1888cb00-a171-437d-9ad2-42354761bfec/overview
Verdict:
Suspicious
Labled as:
TR/PHP.Backdoor
Link:
https://www.hybrid-analysis.com/sample/05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da
Verdict:
Unknown
File Type:
unix shell
Link:
https://opentip.kaspersky.com/05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da/results?tab=lookup
Score:
3%
Verdict:
Benign
File Type:
SCRIPT
Link:
https://malprob.io/report/05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da/
Threat name:
Script-PHP.Trojan.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2026-08-08 12:56:44 UTC
File Type:
Text (PHP)
AV detection:
5 of 24 (20.83%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=axryqsshru54r7lsqxnlw5aqoqrpcyk5fv7ybx43qq4njpvwmpna._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments