MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5517b11aee1c8ca8e268e4050083463f02bb9195b8bcd30b2f544159fe098b3e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5517b11aee1c8ca8e268e4050083463f02bb9195b8bcd30b2f544159fe098b3e
SHA3-384 hash:	5fe51f31794222d15a9dd6f7b7341f826eb999be9b75f8b7071de75723f915fb4fd32f6738898c135fed0bcdf155d35c
SHA1 hash:	30cd1ed57e6d99ca6366e1a3b248b0aadbb0a5f8
MD5 hash:	9e63b796641c74d68bf9ecd16e6920fa
humanhash:	enemy-monkey-idaho-carolina
File name:	curl.sh
Download:	download sample
File size:	606 bytes
First seen:	2024-12-16 14:27:12 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3f6dkvpfk1FhfeaA3LK0GGfeaA3LK0GGfLWtXgSfFyoYOfCp:3J3fBFQL8K0Go8K0GoMXgkzPk
TLSH	T112F0A2AA0917ABF71168CDBEB197930ED04B509E683F8F2CF732098C416A6267908721
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

86

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

97.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67603bc5653a8698dfd474b3linux22vpnfull_triage

Tags:

mirai agent virus shell

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/676038f8acd38d01e484846b/reports/1a333a71-fee7-4cc8-9b60-f9f241ef7adf/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

3%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/5517b11aee1c8ca8e268e4050083463f02bb9195b8bcd30b2f544159fe098b3e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5517b11aee1c8ca8e268e4050083463f02bb9195b8bcd30b2f544159fe098b3e/

ReversingLabs TitaniumCloud Script.Trojan.Multiverze

Threat name:

Script.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-09-12 19:37:46 UTC

File Type:

Text

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kul3cgxodsgkryti4qcqba2gh4blxemvxc6ngczpkravt7qjrm7a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/241216-rs1zdstldj/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/5517b11aee1c8ca8e268e4050083463f02bb9195b8bcd30b2f544159fe098b3e