MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 46517d21e5b3b5b8e1779b350546c91d0fbcd7657cd14a04bfcf794628ce7219. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	46517d21e5b3b5b8e1779b350546c91d0fbcd7657cd14a04bfcf794628ce7219
SHA3-384 hash:	663ba87001c7e5e158a499d78c0242ea9c620f8410add98cc498eb30264ac7e1f965ac2fea5872feeb201cc6fde15738
SHA1 hash:	976d66c9a2721c32b5f8574e5c0e9e5e3312679c
MD5 hash:	94d078d01ed948bbc91f8499527ea04e
humanhash:	bacon-pip-twelve-seven
File name:	wget.sh
Download:	download sample
File size:	147 bytes
First seen:	2025-02-21 16:21:44 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	3:JnFSXiLdjX4wgOSEhWEWoDjiLdjX41Le5OSE8qa72:JoXoZX4wgnoXoZX41Le5ML
TLSH	T142C04CE948A01F54D0DEE94936A78E2B5003C7ECACC7C79E6C9A06364C85600FDA4EC9
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

9

Origin country :

US

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67b8a84028ab76d43a5c521blinux22vpnfull_triage

Tags:

trojan agent hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/67b8a8465b81efb9a6974a78/reports/e7aacf5e-bbbb-4340-8f46-5b4b03416d0c/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/46517d21e5b3b5b8e1779b350546c91d0fbcd7657cd14a04bfcf794628ce7219

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/46517d21e5b3b5b8e1779b350546c91d0fbcd7657cd14a04bfcf794628ce7219/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=izix2ipfwo23rylxtm2qkrwjduh3zv3fptiuubf7z54umkgooimq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250221-tvb46axj18/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/46517d21e5b3b5b8e1779b350546c91d0fbcd7657cd14a04bfcf794628ce7219