MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4014fd11adf44f0079bbb11f45545f444c5dc60574a1e31f7547d2e65959c41c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4014fd11adf44f0079bbb11f45545f444c5dc60574a1e31f7547d2e65959c41c
SHA3-384 hash:	145fa592765cf7ce582abb4ee6378b5644945dbec0209d66e3f9743c32f76b5aeb532784b1d42f34417ca0ebfd6433ad
SHA1 hash:	bc56afa1c6aa684bd25a6de3893fbce68309b776
MD5 hash:	4281a492051239719ca5bab5eaab09ac
humanhash:	pennsylvania-iowa-xray-thirteen
File name:	sh
Download:	download sample
File size:	291 bytes
First seen:	2025-01-04 19:26:36 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:7CrX6wcEE2X6wL3bdX6wrYCrX6wPY4uKPEIU5gZOexQX5J:7ABcEEwBL35BzDBPYqO5Q7xCX
TLSH	T1BDD012CA79A44E6000C75A84A2F31BA9C4CF41AE33F18B2DCF6708A11DD3E09F459ED2
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

136

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67798e1274a2bd296e26e367linux22vpnfull_triage

Tags:

botnet agent smtp

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug

Link:

https://www.filescan.io/uploads/67798b87ddbd8eb878d94f10/reports/e3f7fc7b-189e-42d3-b608-28436d065384/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/4014fd11adf44f0079bbb11f45545f444c5dc60574a1e31f7547d2e65959c41c

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4014fd11adf44f0079bbb11f45545f444c5dc60574a1e31f7547d2e65959c41c/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=iakp2enn6rhqa6n3wepukvc7irgf3rqfosq6gh3vi7jomwkzyqoa._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250104-x93r7stmdv/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4014fd11adf44f0079bbb11f45545f444c5dc60574a1e31f7547d2e65959c41c