MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3fb78a20a4cd693982fa7adbecb074cc50be6a86ff05434dbfafc1096ad5b5ea. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3fb78a20a4cd693982fa7adbecb074cc50be6a86ff05434dbfafc1096ad5b5ea
SHA3-384 hash: 6bf3af410d8c4a5dbbbe338b1dba5606ab9faee76b5833facf7fc5d231486355f2439a1b7bb3cd537537a8459b32c4f3
SHA1 hash: c8e4a97e12bb8e6eedaa746cb32a71982254641b
MD5 hash: 9d90aadfd3b645334807fec9e766e031
humanhash: bulldog-eleven-winner-east
File name:wr.php
Download: download sample
File size:27'042 bytes
First seen:2026-08-21 02:38:35 UTC
Last seen:2026-08-22 00:33:37 UTC
File type: sh
MIME type:text/x-shellscript
ssdeep 768:38vCB+25j6es8Rw79FYpMSUpi+20qUpi+20YQX:38l25JYd2QX
TLSH T1ABC27D966A867C44BEC94A3E4CBD2B1D6DF5C3D1324942AC3D8B3C719C11FACD618B1A
TrID 70.0% (.SH) Linux/UNIX shell script (7000/1)
30.0% (.) Unix-like shebang (var.3) (gen) (3000/1)
Magika shell
Reporter abuse_ch
Tags:sh
URLMalware sample (SHA256 hash)SignatureTags
http://160.119.69.4/z/post/noroot.phpn/an/aelf ua-wget

Intelligence

File Origin
# of uploads :
3
# of downloads :
55
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Detection(s):
SecuriteInfo.com.Linux.DownLoader.2862.24434.28980.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
evasive masquerade
Link:
https://www.filescan.io/uploads/6a87ba502aaf180ce9425e50/reports/dca644bf-17ea-4bf2-99d8-1f8f6c4ab576/overview
Status:
terminated
Link:
https://sandbox.kunai.rocks/analysis/1b3dd114-3618-40ea-9311-779f90555519
Behavior Graph:
Download SVG
%3 guuid=29160545-1a00-0000-50cc-aa4ac0070000 pid=1984 /usr/bin/sudo guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994 /tmp/sample.bin guuid=29160545-1a00-0000-50cc-aa4ac0070000 pid=1984->guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994 execve guuid=5677d14c-1a00-0000-50cc-aa4acc070000 pid=1996 /usr/bin/bash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=5677d14c-1a00-0000-50cc-aa4acc070000 pid=1996 clone guuid=daf64c4d-1a00-0000-50cc-aa4acd070000 pid=1997 /usr/bin/base64 guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=daf64c4d-1a00-0000-50cc-aa4acd070000 pid=1997 execve guuid=13e99d4d-1a00-0000-50cc-aa4ace070000 pid=1998 /usr/bin/bash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=13e99d4d-1a00-0000-50cc-aa4ace070000 pid=1998 clone guuid=5234064f-1a00-0000-50cc-aa4ad0070000 pid=2000 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=5234064f-1a00-0000-50cc-aa4ad0070000 pid=2000 execve guuid=d9b81550-1a00-0000-50cc-aa4ad3070000 pid=2003 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=d9b81550-1a00-0000-50cc-aa4ad3070000 pid=2003 execve guuid=33620451-1a00-0000-50cc-aa4ad6070000 pid=2006 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=33620451-1a00-0000-50cc-aa4ad6070000 pid=2006 execve guuid=df53c451-1a00-0000-50cc-aa4ad8070000 pid=2008 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=df53c451-1a00-0000-50cc-aa4ad8070000 pid=2008 execve guuid=0d745952-1a00-0000-50cc-aa4ada070000 pid=2010 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=0d745952-1a00-0000-50cc-aa4ada070000 pid=2010 execve guuid=0dbe2f53-1a00-0000-50cc-aa4adb070000 pid=2011 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=0dbe2f53-1a00-0000-50cc-aa4adb070000 pid=2011 execve guuid=671ab653-1a00-0000-50cc-aa4adc070000 pid=2012 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=671ab653-1a00-0000-50cc-aa4adc070000 pid=2012 execve guuid=fa8f4e54-1a00-0000-50cc-aa4ade070000 pid=2014 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=fa8f4e54-1a00-0000-50cc-aa4ade070000 pid=2014 execve guuid=b6630355-1a00-0000-50cc-aa4ae0070000 pid=2016 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=b6630355-1a00-0000-50cc-aa4ae0070000 pid=2016 execve guuid=4dd67f55-1a00-0000-50cc-aa4ae2070000 pid=2018 /usr/bin/mkdir guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=4dd67f55-1a00-0000-50cc-aa4ae2070000 pid=2018 execve guuid=69fce355-1a00-0000-50cc-aa4ae3070000 pid=2019 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=69fce355-1a00-0000-50cc-aa4ae3070000 pid=2019 execve guuid=0423a856-1a00-0000-50cc-aa4ae5070000 pid=2021 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=0423a856-1a00-0000-50cc-aa4ae5070000 pid=2021 execve guuid=b0a58957-1a00-0000-50cc-aa4ae7070000 pid=2023 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=b0a58957-1a00-0000-50cc-aa4ae7070000 pid=2023 execve guuid=9f483a58-1a00-0000-50cc-aa4ae9070000 pid=2025 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=9f483a58-1a00-0000-50cc-aa4ae9070000 pid=2025 execve guuid=4771d758-1a00-0000-50cc-aa4aeb070000 pid=2027 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=4771d758-1a00-0000-50cc-aa4aeb070000 pid=2027 execve guuid=b7335659-1a00-0000-50cc-aa4aed070000 pid=2029 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=b7335659-1a00-0000-50cc-aa4aed070000 pid=2029 execve guuid=533ef359-1a00-0000-50cc-aa4aee070000 pid=2030 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=533ef359-1a00-0000-50cc-aa4aee070000 pid=2030 execve guuid=90257f5a-1a00-0000-50cc-aa4af0070000 pid=2032 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=90257f5a-1a00-0000-50cc-aa4af0070000 pid=2032 execve guuid=c866145b-1a00-0000-50cc-aa4af2070000 pid=2034 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=c866145b-1a00-0000-50cc-aa4af2070000 pid=2034 execve guuid=5f809d5b-1a00-0000-50cc-aa4af3070000 pid=2035 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=5f809d5b-1a00-0000-50cc-aa4af3070000 pid=2035 execve guuid=0728105c-1a00-0000-50cc-aa4af5070000 pid=2037 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=0728105c-1a00-0000-50cc-aa4af5070000 pid=2037 execve guuid=addda85c-1a00-0000-50cc-aa4af7070000 pid=2039 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=addda85c-1a00-0000-50cc-aa4af7070000 pid=2039 execve guuid=85507d5d-1a00-0000-50cc-aa4af9070000 pid=2041 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=85507d5d-1a00-0000-50cc-aa4af9070000 pid=2041 execve guuid=e353105e-1a00-0000-50cc-aa4afb070000 pid=2043 /usr/bin/cp guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=e353105e-1a00-0000-50cc-aa4afb070000 pid=2043 execve guuid=a066ba5e-1a00-0000-50cc-aa4afd070000 pid=2045 /usr/bin/touch guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=a066ba5e-1a00-0000-50cc-aa4afd070000 pid=2045 execve guuid=a89f2e5f-1a00-0000-50cc-aa4aff070000 pid=2047 /usr/bin/chmod guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=a89f2e5f-1a00-0000-50cc-aa4aff070000 pid=2047 execve guuid=a554c15f-1a00-0000-50cc-aa4a02080000 pid=2050 /usr/bin/chmod guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=a554c15f-1a00-0000-50cc-aa4a02080000 pid=2050 execve guuid=a86c8660-1a00-0000-50cc-aa4a04080000 pid=2052 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=a86c8660-1a00-0000-50cc-aa4a04080000 pid=2052 execve guuid=200e5361-1a00-0000-50cc-aa4a06080000 pid=2054 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=200e5361-1a00-0000-50cc-aa4a06080000 pid=2054 execve guuid=4c789761-1a00-0000-50cc-aa4a08080000 pid=2056 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=4c789761-1a00-0000-50cc-aa4a08080000 pid=2056 execve guuid=4522e961-1a00-0000-50cc-aa4a09080000 pid=2057 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=4522e961-1a00-0000-50cc-aa4a09080000 pid=2057 execve guuid=7b405762-1a00-0000-50cc-aa4a0a080000 pid=2058 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=7b405762-1a00-0000-50cc-aa4a0a080000 pid=2058 execve guuid=9a82a862-1a00-0000-50cc-aa4a0c080000 pid=2060 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=9a82a862-1a00-0000-50cc-aa4a0c080000 pid=2060 execve guuid=f72bfc62-1a00-0000-50cc-aa4a0e080000 pid=2062 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=f72bfc62-1a00-0000-50cc-aa4a0e080000 pid=2062 execve guuid=65ed4863-1a00-0000-50cc-aa4a0f080000 pid=2063 /usr/bin/chattr guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=65ed4863-1a00-0000-50cc-aa4a0f080000 pid=2063 execve guuid=2eaab163-1a00-0000-50cc-aa4a11080000 pid=2065 /usr/bin/bash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=2eaab163-1a00-0000-50cc-aa4a11080000 pid=2065 clone guuid=ce83b763-1a00-0000-50cc-aa4a12080000 pid=2066 /usr/bin/bash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=ce83b763-1a00-0000-50cc-aa4a12080000 pid=2066 clone guuid=e655f863-1a00-0000-50cc-aa4a13080000 pid=2067 /usr/bin/curl net send-data guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=e655f863-1a00-0000-50cc-aa4a13080000 pid=2067 execve guuid=317efd63-1a00-0000-50cc-aa4a14080000 pid=2068 /usr/bin/dash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=317efd63-1a00-0000-50cc-aa4a14080000 pid=2068 execve guuid=20c47775-1a00-0000-50cc-aa4a3b080000 pid=2107 /usr/bin/bash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=20c47775-1a00-0000-50cc-aa4a3b080000 pid=2107 clone guuid=be288475-1a00-0000-50cc-aa4a3c080000 pid=2108 /usr/bin/base64 guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=be288475-1a00-0000-50cc-aa4a3c080000 pid=2108 execve guuid=2a499175-1a00-0000-50cc-aa4a3d080000 pid=2109 /usr/bin/tee write-file guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=2a499175-1a00-0000-50cc-aa4a3d080000 pid=2109 execve guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111 /usr/bin/bash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111 execve guuid=1398b87d-1a00-0000-50cc-aa4a63080000 pid=2147 /usr/bin/bash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=1398b87d-1a00-0000-50cc-aa4a63080000 pid=2147 execve guuid=8fc9347e-1a00-0000-50cc-aa4a65080000 pid=2149 /usr/bin/rm delete-file guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=8fc9347e-1a00-0000-50cc-aa4a65080000 pid=2149 execve guuid=dfe3a17e-1a00-0000-50cc-aa4a67080000 pid=2151 /usr/bin/rm guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=dfe3a17e-1a00-0000-50cc-aa4a67080000 pid=2151 execve guuid=430d077f-1a00-0000-50cc-aa4a69080000 pid=2153 /usr/bin/curl net send-data guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=430d077f-1a00-0000-50cc-aa4a69080000 pid=2153 execve guuid=d8fe147f-1a00-0000-50cc-aa4a6a080000 pid=2154 /usr/bin/dash guuid=bcba6f48-1a00-0000-50cc-aa4aca070000 pid=1994->guuid=d8fe147f-1a00-0000-50cc-aa4a6a080000 pid=2154 execve 124ee36c-bdbd-5d46-bbb1-b2cd81367f04 160.119.69.4:80 guuid=e655f863-1a00-0000-50cc-aa4a13080000 pid=2067->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B guuid=366dae76-1a00-0000-50cc-aa4a41080000 pid=2113 /usr/bin/bash guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=366dae76-1a00-0000-50cc-aa4a41080000 pid=2113 clone guuid=d2d1bb76-1a00-0000-50cc-aa4a42080000 pid=2114 /usr/bin/bash guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=d2d1bb76-1a00-0000-50cc-aa4a42080000 pid=2114 clone guuid=c84df376-1a00-0000-50cc-aa4a44080000 pid=2116 /usr/bin/ls guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=c84df376-1a00-0000-50cc-aa4a44080000 pid=2116 execve guuid=04efa877-1a00-0000-50cc-aa4a46080000 pid=2118 /usr/bin/cat guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=04efa877-1a00-0000-50cc-aa4a46080000 pid=2118 execve guuid=51711778-1a00-0000-50cc-aa4a48080000 pid=2120 /usr/bin/ls guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=51711778-1a00-0000-50cc-aa4a48080000 pid=2120 execve guuid=89498d78-1a00-0000-50cc-aa4a4b080000 pid=2123 /usr/bin/mkdir guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=89498d78-1a00-0000-50cc-aa4a4b080000 pid=2123 execve guuid=f7560279-1a00-0000-50cc-aa4a4d080000 pid=2125 /usr/bin/mv guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=f7560279-1a00-0000-50cc-aa4a4d080000 pid=2125 execve guuid=cafe8e79-1a00-0000-50cc-aa4a50080000 pid=2128 /usr/bin/bash guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=cafe8e79-1a00-0000-50cc-aa4a50080000 pid=2128 clone guuid=d2df9779-1a00-0000-50cc-aa4a51080000 pid=2129 /usr/bin/base64 write-file guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=d2df9779-1a00-0000-50cc-aa4a51080000 pid=2129 execve guuid=255b157a-1a00-0000-50cc-aa4a53080000 pid=2131 /usr/bin/rm delete-file guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=255b157a-1a00-0000-50cc-aa4a53080000 pid=2131 execve guuid=84cd9c7a-1a00-0000-50cc-aa4a56080000 pid=2134 /usr/bin/mv guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=84cd9c7a-1a00-0000-50cc-aa4a56080000 pid=2134 execve guuid=096c1f7b-1a00-0000-50cc-aa4a58080000 pid=2136 /usr/bin/ls guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=096c1f7b-1a00-0000-50cc-aa4a58080000 pid=2136 execve guuid=98ed967b-1a00-0000-50cc-aa4a5a080000 pid=2138 /usr/bin/bash guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=98ed967b-1a00-0000-50cc-aa4a5a080000 pid=2138 clone guuid=ed37a17b-1a00-0000-50cc-aa4a5b080000 pid=2139 /usr/bin/base64 write-file guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=ed37a17b-1a00-0000-50cc-aa4a5b080000 pid=2139 execve guuid=893bf77b-1a00-0000-50cc-aa4a5d080000 pid=2141 /usr/bin/ls guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=893bf77b-1a00-0000-50cc-aa4a5d080000 pid=2141 execve guuid=6f96947c-1a00-0000-50cc-aa4a5f080000 pid=2143 /usr/bin/cat guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=6f96947c-1a00-0000-50cc-aa4a5f080000 pid=2143 execve guuid=ac5af07c-1a00-0000-50cc-aa4a61080000 pid=2145 /usr/bin/ls guuid=254c3876-1a00-0000-50cc-aa4a3f080000 pid=2111->guuid=ac5af07c-1a00-0000-50cc-aa4a61080000 pid=2145 execve guuid=430d077f-1a00-0000-50cc-aa4a69080000 pid=2153->124ee36c-bdbd-5d46-bbb1-b2cd81367f04 send: 93B
Score:
81%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/3fb78a20a4cd693982fa7adbecb074cc50be6a86ff05434dbfafc1096ad5b5ea
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3fb78a20a4cd693982fa7adbecb074cc50be6a86ff05434dbfafc1096ad5b5ea/
Threat name:
Linux.Backdoor.WebShell
Create hunting rule
Status:
Malicious
First seen:
2026-08-21 02:39:15 UTC
File Type:
Text (Shell)
AV detection:
16 of 36 (44.44%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=h63yuifezvuttax2pln6zmduzril42ug74cugtn7v7aqs2wvwxva._file
Result
Malware family:
n/a
Score:
  7/10
Tags:
antivm defense_evasion discovery linux
Link:
https://tria.ge/reports/260821-c5dx3ahc38/
Behaviour
Reads runtime system information
Writes file to tmp directory
Deobfuscate/Decode Files or Information
Checks CPU configuration
File and Directory Permissions Modification
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.16
Link:
https://yomi.yoroi.company/submissions/3fb78a20a4cd693982fa7adbecb074cc50be6a86ff05434dbfafc1096ad5b5ea

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:SUSP_LNX_Base64_Exec_Apr24
Create hunting rule
Author:Christian Burkard
Description:Detects suspicious base64 encoded shell commands (as seen in Palo Alto CVE-2024-3400 exploitation)
Reference:Internal Research

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

sh 3fb78a20a4cd693982fa7adbecb074cc50be6a86ff05434dbfafc1096ad5b5ea

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/3884408/
  
Delivery method
Distributed via web download

Comments