MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 347291dfd8c26dbf033be8e4f5e6fa196a103d0e77f41a34b6e8c1c62fadab75. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 347291dfd8c26dbf033be8e4f5e6fa196a103d0e77f41a34b6e8c1c62fadab75
SHA3-384 hash: 8d238118aa24a02ff2e8727d81b32d74e47381a4c1e5885d71c1eee6a49f2679032248f4f79e0a67c833fd67c6277ab5
SHA1 hash: abeb39d9100b2734208aee0d343d575a2b6d3658
MD5 hash: 5778b2254df698cedfef58d676f6f911
humanhash: saturn-shade-two-angel
File name:wr.php
Download: download sample
File size:27'042 bytes
First seen:2026-08-18 20:22:41 UTC
Last seen:Never
File type: sh
MIME type:text/x-shellscript
ssdeep 768:Ehy8vCB+25j6es8Rbd9FYpMSUpi+20qUpi+20YQX:EI8l25JXd2QX
TLSH T1CBC27D966A867C44BEC98A3E4CBD2B1D6DF5C3D1224D42AC3D8B3C719C11F9CD618B1A
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter abuse_ch
Tags:sh

Intelligence

File Origin
# of uploads :
1
# of downloads :
47
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
evasive masquerade
Link:
https://www.filescan.io/uploads/6a84bf3ce02876a89e1f119e/reports/bc64397f-0d05-491c-94e3-03846d17e552/overview
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/752dcee9-894b-4b7f-a1e9-0974062f67cf
Behavior Graph:
Download SVG
%3 guuid=dedc6333-1b00-0000-e3f2-6c6852080000 pid=2130 /usr/bin/sudo guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131 /tmp/sample.bin guuid=dedc6333-1b00-0000-e3f2-6c6852080000 pid=2130->guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131 execve guuid=fa3a0d37-1b00-0000-e3f2-6c6854080000 pid=2132 /usr/bin/bash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=fa3a0d37-1b00-0000-e3f2-6c6854080000 pid=2132 clone guuid=d3282037-1b00-0000-e3f2-6c6855080000 pid=2133 /usr/bin/base64 guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=d3282037-1b00-0000-e3f2-6c6855080000 pid=2133 execve guuid=65d02f37-1b00-0000-e3f2-6c6856080000 pid=2134 /usr/bin/bash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=65d02f37-1b00-0000-e3f2-6c6856080000 pid=2134 clone guuid=fe668ba7-1b00-0000-e3f2-6c685e080000 pid=2142 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=fe668ba7-1b00-0000-e3f2-6c685e080000 pid=2142 execve guuid=4686dba8-1b00-0000-e3f2-6c685f080000 pid=2143 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=4686dba8-1b00-0000-e3f2-6c685f080000 pid=2143 execve guuid=947b97a9-1b00-0000-e3f2-6c6861080000 pid=2145 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=947b97a9-1b00-0000-e3f2-6c6861080000 pid=2145 execve guuid=d4470baa-1b00-0000-e3f2-6c6863080000 pid=2147 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=d4470baa-1b00-0000-e3f2-6c6863080000 pid=2147 execve guuid=818773aa-1b00-0000-e3f2-6c6865080000 pid=2149 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=818773aa-1b00-0000-e3f2-6c6865080000 pid=2149 execve guuid=4b2bd4aa-1b00-0000-e3f2-6c6867080000 pid=2151 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=4b2bd4aa-1b00-0000-e3f2-6c6867080000 pid=2151 execve guuid=759339ab-1b00-0000-e3f2-6c6869080000 pid=2153 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=759339ab-1b00-0000-e3f2-6c6869080000 pid=2153 execve guuid=12dea3ab-1b00-0000-e3f2-6c686b080000 pid=2155 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=12dea3ab-1b00-0000-e3f2-6c686b080000 pid=2155 execve guuid=4254ffab-1b00-0000-e3f2-6c686c080000 pid=2156 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=4254ffab-1b00-0000-e3f2-6c686c080000 pid=2156 execve guuid=7c9982ac-1b00-0000-e3f2-6c686d080000 pid=2157 /usr/bin/mkdir guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=7c9982ac-1b00-0000-e3f2-6c686d080000 pid=2157 execve guuid=d76f0dad-1b00-0000-e3f2-6c686e080000 pid=2158 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=d76f0dad-1b00-0000-e3f2-6c686e080000 pid=2158 execve guuid=df02a2ad-1b00-0000-e3f2-6c6870080000 pid=2160 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=df02a2ad-1b00-0000-e3f2-6c6870080000 pid=2160 execve guuid=3ad54bae-1b00-0000-e3f2-6c6871080000 pid=2161 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=3ad54bae-1b00-0000-e3f2-6c6871080000 pid=2161 execve guuid=7c4fd9ae-1b00-0000-e3f2-6c6872080000 pid=2162 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=7c4fd9ae-1b00-0000-e3f2-6c6872080000 pid=2162 execve guuid=2e9c77af-1b00-0000-e3f2-6c6874080000 pid=2164 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=2e9c77af-1b00-0000-e3f2-6c6874080000 pid=2164 execve guuid=a6477db0-1b00-0000-e3f2-6c6877080000 pid=2167 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=a6477db0-1b00-0000-e3f2-6c6877080000 pid=2167 execve guuid=0975f8b0-1b00-0000-e3f2-6c687a080000 pid=2170 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=0975f8b0-1b00-0000-e3f2-6c687a080000 pid=2170 execve guuid=ca0160b1-1b00-0000-e3f2-6c687c080000 pid=2172 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=ca0160b1-1b00-0000-e3f2-6c687c080000 pid=2172 execve guuid=dbb74fb2-1b00-0000-e3f2-6c687f080000 pid=2175 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=dbb74fb2-1b00-0000-e3f2-6c687f080000 pid=2175 execve guuid=3e2ce2b2-1b00-0000-e3f2-6c6882080000 pid=2178 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=3e2ce2b2-1b00-0000-e3f2-6c6882080000 pid=2178 execve guuid=165283b3-1b00-0000-e3f2-6c6883080000 pid=2179 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=165283b3-1b00-0000-e3f2-6c6883080000 pid=2179 execve guuid=e751e7b3-1b00-0000-e3f2-6c6885080000 pid=2181 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=e751e7b3-1b00-0000-e3f2-6c6885080000 pid=2181 execve guuid=d17a5db4-1b00-0000-e3f2-6c6887080000 pid=2183 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=d17a5db4-1b00-0000-e3f2-6c6887080000 pid=2183 execve guuid=87a1bbb4-1b00-0000-e3f2-6c6889080000 pid=2185 /usr/bin/cp guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=87a1bbb4-1b00-0000-e3f2-6c6889080000 pid=2185 execve guuid=58a516b5-1b00-0000-e3f2-6c688b080000 pid=2187 /usr/bin/touch guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=58a516b5-1b00-0000-e3f2-6c688b080000 pid=2187 execve guuid=01905cb5-1b00-0000-e3f2-6c688d080000 pid=2189 /usr/bin/chmod guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=01905cb5-1b00-0000-e3f2-6c688d080000 pid=2189 execve guuid=dafaa2b5-1b00-0000-e3f2-6c688f080000 pid=2191 /usr/bin/chmod guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=dafaa2b5-1b00-0000-e3f2-6c688f080000 pid=2191 execve guuid=9e9fe7b5-1b00-0000-e3f2-6c6891080000 pid=2193 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=9e9fe7b5-1b00-0000-e3f2-6c6891080000 pid=2193 execve guuid=f65fbbb6-1b00-0000-e3f2-6c6894080000 pid=2196 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=f65fbbb6-1b00-0000-e3f2-6c6894080000 pid=2196 execve guuid=60ca3cb7-1b00-0000-e3f2-6c6897080000 pid=2199 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=60ca3cb7-1b00-0000-e3f2-6c6897080000 pid=2199 execve guuid=577492b7-1b00-0000-e3f2-6c6898080000 pid=2200 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=577492b7-1b00-0000-e3f2-6c6898080000 pid=2200 execve guuid=c7abf9b7-1b00-0000-e3f2-6c6899080000 pid=2201 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=c7abf9b7-1b00-0000-e3f2-6c6899080000 pid=2201 execve guuid=87b75db8-1b00-0000-e3f2-6c689a080000 pid=2202 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=87b75db8-1b00-0000-e3f2-6c689a080000 pid=2202 execve guuid=9ef8acb8-1b00-0000-e3f2-6c689c080000 pid=2204 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=9ef8acb8-1b00-0000-e3f2-6c689c080000 pid=2204 execve guuid=62b3f9b8-1b00-0000-e3f2-6c689e080000 pid=2206 /usr/bin/chattr guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=62b3f9b8-1b00-0000-e3f2-6c689e080000 pid=2206 execve guuid=c17f4bb9-1b00-0000-e3f2-6c68a0080000 pid=2208 /usr/bin/bash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=c17f4bb9-1b00-0000-e3f2-6c68a0080000 pid=2208 clone guuid=769255b9-1b00-0000-e3f2-6c68a1080000 pid=2209 /usr/bin/bash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=769255b9-1b00-0000-e3f2-6c68a1080000 pid=2209 clone guuid=fd5e94b9-1b00-0000-e3f2-6c68a3080000 pid=2211 /usr/bin/curl net send-data guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=fd5e94b9-1b00-0000-e3f2-6c68a3080000 pid=2211 execve guuid=5c459ab9-1b00-0000-e3f2-6c68a4080000 pid=2212 /usr/bin/dash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=5c459ab9-1b00-0000-e3f2-6c68a4080000 pid=2212 execve guuid=e3a580c4-1b00-0000-e3f2-6c68ba080000 pid=2234 /usr/bin/bash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=e3a580c4-1b00-0000-e3f2-6c68ba080000 pid=2234 clone guuid=9f8088c4-1b00-0000-e3f2-6c68bb080000 pid=2235 /usr/bin/base64 guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=9f8088c4-1b00-0000-e3f2-6c68bb080000 pid=2235 execve guuid=52f393c4-1b00-0000-e3f2-6c68bc080000 pid=2236 /usr/bin/tee write-file guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=52f393c4-1b00-0000-e3f2-6c68bc080000 pid=2236 execve guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238 /usr/bin/bash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238 execve guuid=91d5cbd2-1b00-0000-e3f2-6c68e9080000 pid=2281 /usr/bin/bash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=91d5cbd2-1b00-0000-e3f2-6c68e9080000 pid=2281 execve guuid=8a4c4bd3-1b00-0000-e3f2-6c68eb080000 pid=2283 /usr/bin/rm delete-file guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=8a4c4bd3-1b00-0000-e3f2-6c68eb080000 pid=2283 execve guuid=e57bccd3-1b00-0000-e3f2-6c68ee080000 pid=2286 /usr/bin/rm guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=e57bccd3-1b00-0000-e3f2-6c68ee080000 pid=2286 execve guuid=07f969d4-1b00-0000-e3f2-6c68f0080000 pid=2288 /usr/bin/curl net send-data guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=07f969d4-1b00-0000-e3f2-6c68f0080000 pid=2288 execve guuid=2a607bd4-1b00-0000-e3f2-6c68f1080000 pid=2289 /usr/bin/dash guuid=2a237636-1b00-0000-e3f2-6c6853080000 pid=2131->guuid=2a607bd4-1b00-0000-e3f2-6c68f1080000 pid=2289 execve 124ee36c-bdbd-5d46-bbb1-b2cd81367f04 160.119.69.4:80 guuid=fd5e94b9-1b00-0000-e3f2-6c68a3080000 pid=2211->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B guuid=860537c6-1b00-0000-e3f2-6c68c1080000 pid=2241 /usr/bin/bash guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=860537c6-1b00-0000-e3f2-6c68c1080000 pid=2241 clone guuid=11be3ec6-1b00-0000-e3f2-6c68c2080000 pid=2242 /usr/bin/bash guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=11be3ec6-1b00-0000-e3f2-6c68c2080000 pid=2242 clone guuid=93b6fbc6-1b00-0000-e3f2-6c68c4080000 pid=2244 /usr/bin/ls guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=93b6fbc6-1b00-0000-e3f2-6c68c4080000 pid=2244 execve guuid=d663acc7-1b00-0000-e3f2-6c68c7080000 pid=2247 /usr/bin/cat guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=d663acc7-1b00-0000-e3f2-6c68c7080000 pid=2247 execve guuid=ddf82cc8-1b00-0000-e3f2-6c68c9080000 pid=2249 /usr/bin/ls guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=ddf82cc8-1b00-0000-e3f2-6c68c9080000 pid=2249 execve guuid=c6af09c9-1b00-0000-e3f2-6c68cb080000 pid=2251 /usr/bin/mkdir guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=c6af09c9-1b00-0000-e3f2-6c68cb080000 pid=2251 execve guuid=8acccdc9-1b00-0000-e3f2-6c68ce080000 pid=2254 /usr/bin/mv guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=8acccdc9-1b00-0000-e3f2-6c68ce080000 pid=2254 execve guuid=ca86d4ca-1b00-0000-e3f2-6c68d0080000 pid=2256 /usr/bin/bash guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=ca86d4ca-1b00-0000-e3f2-6c68d0080000 pid=2256 clone guuid=dcd6e2ca-1b00-0000-e3f2-6c68d1080000 pid=2257 /usr/bin/base64 write-file guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=dcd6e2ca-1b00-0000-e3f2-6c68d1080000 pid=2257 execve guuid=7337e0cb-1b00-0000-e3f2-6c68d3080000 pid=2259 /usr/bin/rm delete-file guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=7337e0cb-1b00-0000-e3f2-6c68d3080000 pid=2259 execve guuid=b81f98cc-1b00-0000-e3f2-6c68d5080000 pid=2261 /usr/bin/mv guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=b81f98cc-1b00-0000-e3f2-6c68d5080000 pid=2261 execve guuid=d856c9cd-1b00-0000-e3f2-6c68d8080000 pid=2264 /usr/bin/ls guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=d856c9cd-1b00-0000-e3f2-6c68d8080000 pid=2264 execve guuid=2c61e3ce-1b00-0000-e3f2-6c68dc080000 pid=2268 /usr/bin/bash guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=2c61e3ce-1b00-0000-e3f2-6c68dc080000 pid=2268 clone guuid=6df1f6ce-1b00-0000-e3f2-6c68dd080000 pid=2269 /usr/bin/base64 write-file guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=6df1f6ce-1b00-0000-e3f2-6c68dd080000 pid=2269 execve guuid=3f4215d0-1b00-0000-e3f2-6c68df080000 pid=2271 /usr/bin/ls guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=3f4215d0-1b00-0000-e3f2-6c68df080000 pid=2271 execve guuid=3ae63ed1-1b00-0000-e3f2-6c68e3080000 pid=2275 /usr/bin/cat guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=3ae63ed1-1b00-0000-e3f2-6c68e3080000 pid=2275 execve guuid=27abecd1-1b00-0000-e3f2-6c68e5080000 pid=2277 /usr/bin/ls guuid=e77fa2c5-1b00-0000-e3f2-6c68be080000 pid=2238->guuid=27abecd1-1b00-0000-e3f2-6c68e5080000 pid=2277 execve guuid=07f969d4-1b00-0000-e3f2-6c68f0080000 pid=2288->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B
Score:
81%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/347291dfd8c26dbf033be8e4f5e6fa196a103d0e77f41a34b6e8c1c62fadab75
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/347291dfd8c26dbf033be8e4f5e6fa196a103d0e77f41a34b6e8c1c62fadab75/
Threat name:
Linux.Backdoor.WebShell
Create hunting rule
Status:
Malicious
First seen:
2026-08-18 20:23:27 UTC
File Type:
Text (Shell)
AV detection:
16 of 36 (44.44%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=grzjdx6yyjw36az35dsplzx2dfvbapioo72bunfw5da4ml5nvn2q._file
Result
Malware family:
n/a
Score:
  7/10
Tags:
antivm defense_evasion discovery linux
Link:
https://tria.ge/reports/260818-y6b1ra1xgv/
Behaviour
Reads runtime system information
Writes file to tmp directory
Deobfuscate/Decode Files or Information
Checks CPU configuration
File and Directory Permissions Modification
Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:SUSP_LNX_Base64_Exec_Apr24
Create hunting rule
Author:Christian Burkard
Description:Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation)
Reference:Internal Research

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh 347291dfd8c26dbf033be8e4f5e6fa196a103d0e77f41a34b6e8c1c62fadab75

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3884409/
  
Delivery method
Distributed via web download

Comments