MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 278d4ff231468777c2303915c8a26c89d5efb820b4cb33444d4749b2d87908fc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	278d4ff231468777c2303915c8a26c89d5efb820b4cb33444d4749b2d87908fc
SHA3-384 hash:	6fc2ebe72ce61cf9ddb07215e27ae8614940711cfa1e083037444333cab4b897f7c1987e4b711383ae7a3dfc03ceb71b
SHA1 hash:	885a7df0ac4a0f6c746eaab5b8e1e6c71cd3c13d
MD5 hash:	e6e10a1acb81c7a37528690c59d4c827
humanhash:	mockingbird-fruit-oxygen-one
File name:	kij.sh
Download:	download sample
File size:	1'097 bytes
First seen:	2025-06-11 05:35:20 UTC
Last seen:	2025-06-12 03:25:42 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:cq4qvhab2GmVeJm42kITbdPJW9LMvOsYBY18esKI1jDMvOUg78qyK:cq4zd043nLU9rI1jDhj
TLSH	T190116A8C651EC3242FC4A07C64691408CA8695A3470BAD20798F74755F8AC02B7AEE76
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

59

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=684915f807b5e8c1cfe637a7linux22vpnfull_triage

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/684915affd02ed5e05a35f27/reports/7fc58622-6b14-4d72-8de4-039a3e8b6e99/overview

Nucleon Malprob Benign

Score:

4%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/278d4ff231468777c2303915c8a26c89d5efb820b4cb33444d4749b2d87908fc

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/278d4ff231468777c2303915c8a26c89d5efb820b4cb33444d4749b2d87908fc/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-06-11 04:54:54 UTC

File Type:

Text (Shell)

AV detection:

5 of 38 (13.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=e6gu74rri2dxpqrqhek4ritmrhk67obawtftgrcni5e3fwdzbd6a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery linux

Link:

https://tria.ge/reports/250611-gabaxaxmz6/

Behaviour

Reads runtime system information

System Network Configuration Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/278d4ff231468777c2303915c8a26c89d5efb820b4cb33444d4749b2d87908fc