MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 37d98ab4a7615caa8e54c667852d73a6e1bbd07ea9cb5758fbb02202cf5e3d84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	37d98ab4a7615caa8e54c667852d73a6e1bbd07ea9cb5758fbb02202cf5e3d84
SHA3-384 hash:	530df0608dbe6454ad699417016b9ff4bc3e4c9c0cae448507f1939e42a9f7d58bcf86aa87246108b3401279bf493150
SHA1 hash:	c21ced9f498f814b402318f012a37a5dad35e72e
MD5 hash:	55d4e055bfbab966303e75e72c9be3e2
humanhash:	timing-apart-network-fifteen
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'114 bytes
First seen:	2025-11-27 10:25:17 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:qlUSsVUUNIOOAU1NK4HUFEUbUWTDkwUesHULKAUSvHUCcAUAHAUR:qW2UNIf7K97IWTDk1l0+lPCgGHR
TLSH	T1E62129DE3799D402DF2D4EC43075881AA28D86E077250B88F6AD44F769DEB1D7329E0B
Magika	asm
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

34

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-32.UNOFFICIAL

Alert

Create hunting rule

FileScan.io

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-11-27T08:19:00Z UTC

Last seen:

2025-11-27T08:32:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/37d98ab4a7615caa8e54c667852d73a6e1bbd07ea9cb5758fbb02202cf5e3d84/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/9f5759be-3d1b-4b61-8d08-bb268bcecc69

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/37d98ab4a7615caa8e54c667852d73a6e1bbd07ea9cb5758fbb02202cf5e3d84

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/37d98ab4a7615caa8e54c667852d73a6e1bbd07ea9cb5758fbb02202cf5e3d84/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-27 10:23:50 UTC

File Type:

Text (Shell)

AV detection:

14 of 36 (38.89%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=g7myvnfhmfokvdsuyztyklltu3q3xud6vhfvowh3waraft26hwca._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251127-mf6lwsvjbw/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/37d98ab4a7615caa8e54c667852d73a6e1bbd07ea9cb5758fbb02202cf5e3d84