MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 409f79a9ee68c282a7d2b5738d63a310dd33345cb43fb23f11f92f54308a8b1e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	409f79a9ee68c282a7d2b5738d63a310dd33345cb43fb23f11f92f54308a8b1e
SHA3-384 hash:	42b898c14c31089d8485da7df4e1abb1a2188c618a7e2f79b7d5c9b4f45f41983990857b026ea822bc77d290d539f2df
SHA1 hash:	0287044fc15dfb8a29845dd85039eca8e5c220c5
MD5 hash:	988950fcd095c1e9ff9e8b4d30e10ca4
humanhash:	sixteen-video-magnesium-romeo
File name:	EXP NP007FB0081-pdf.url
Download:	download sample
Signature	DCRat Alert Create hunting rule
File size:	160 bytes
First seen:	2026-07-23 09:02:24 UTC
Last seen:	Never
File type:
MIME type:	application/x-mswinurl
ssdeep	3:Q+2lRQuRkiglZlo1CUfKlVuDRl3Q+LpSlJtNMZ5lk5l4cJlVJlHMl:Q+2lJglZytfKvuDD3Q+ghmZ5lmxsl
TLSH	T16BC02B0013F20365F743862125380042CA733627F400EA0C0CA7048C00B0C30C9D3B13
TrID	66.6% (.TXT) Text - UTF-16 (LE) encoded (2000/1) 33.3% (.MP3) MP3 audio (1000/1)
Magika	internetshortcut
Reporter	smica83
Tags:	url

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

115

Origin country :

HU

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

webdav

Link:

https://www.filescan.io/uploads/6a61d8adec02c97118a98f3d/reports/097ebc58-e285-46cb-a285-d829274aa18c/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/409f79a9ee68c282a7d2b5738d63a310dd33345cb43fb23f11f92f54308a8b1e

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text.internetshortcut

First seen:

2026-07-24T10:07:00Z UTC

Last seen:

2026-07-24T20:13:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/409f79a9ee68c282a7d2b5738d63a310dd33345cb43fb23f11f92f54308a8b1e/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/409f79a9ee68c282a7d2b5738d63a310dd33345cb43fb23f11f92f54308a8b1e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/409f79a9ee68c282a7d2b5738d63a310dd33345cb43fb23f11f92f54308a8b1e/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=icpxtkpondbifj6swvzy2y5dcdotgnc4wq73epyr7exvimekrmpa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.70

Link:

https://yomi.yoroi.company/submissions/409f79a9ee68c282a7d2b5738d63a310dd33345cb43fb23f11f92f54308a8b1e