MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0dc95fb4077cce0bff19aa1a77109d059dff6503bbf6c1b0dd2f41fc0a4c88e7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Prometei


Vendor detections: 1


Intelligence 1 IOCs YARA File information Comments

SHA256 hash: 0dc95fb4077cce0bff19aa1a77109d059dff6503bbf6c1b0dd2f41fc0a4c88e7
SHA3-384 hash: d4fd90ff55b6451d844b66c6ef6bda6a4f9b59394cd1c87fe2dba0610ec94e9b99ca404f6a76d19651f8a81c93a5e0d9
SHA1 hash: 1b7b89de0c6ed1a37766e8ff0aa2fe3213d7a983
MD5 hash: 0c170fe680f144851874a532f3e66dce
humanhash: monkey-oven-east-iowa
File name:0dc95fb4077cce0bff19aa1a77109d059dff6503bbf6c1b0dd2f41fc0a4c88e7
Download: download sample
Signature Prometei
File size:9 bytes
First seen:2026-05-28 22:32:49 UTC
Last seen:2026-05-29 00:07:18 UTC
File type: sh
MIME type:text/plain
ssdeep 3:wA:wA
TLSH TNULL
Magika txt
Reporter c2hunter
Tags:Prometei sh wraith

Intelligence


File Origin
# of uploads :
3
# of downloads :
10
Origin country :
US US
Vendor Threat Intelligence
No detections
Status:
terminated
Behavior Graph:
%3 guuid=1fe973ca-1a00-0000-6038-bc227f090000 pid=2431 /usr/bin/sudo guuid=d86194cc-1a00-0000-6038-bc2281090000 pid=2433 /tmp/sample.bin guuid=1fe973ca-1a00-0000-6038-bc227f090000 pid=2431->guuid=d86194cc-1a00-0000-6038-bc2281090000 pid=2433 execve
Gathering data
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments