MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 56fb1da47554266f943d515380c7d11392e8e2906dbb5b54ca94c4c9100e585d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	56fb1da47554266f943d515380c7d11392e8e2906dbb5b54ca94c4c9100e585d
SHA3-384 hash:	159573b0762ac59046b4626a3ee136fb51fc54a2e4c764575b9bf26ab30766c8dee6a29a074b2f6e72d377f6098aca35
SHA1 hash:	e91f162b75153ceae361b97aec582fdcac855433
MD5 hash:	47bd984ba3195843c022415ae8863992
humanhash:	london-cup-speaker-fix
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	862 bytes
First seen:	2025-01-14 06:06:00 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:Kr/yQInJRNIyxk2OKUX+DwZlsu6/NedeXn:m/UhlOiqNmNwqn
TLSH	T155119BCE2D70755A0844DDC426A19840BC0AFEEAD4969B4EF5C8CE7D56C8B14702EFCB
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

95

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6785fecb4487910100debb3blinux22vpnfull_triage

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6785fed03c232c0ddc8ebd47/reports/b77411eb-fb7d-4832-8fd2-d6ebf9fd218f/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/56fb1da47554266f943d515380c7d11392e8e2906dbb5b54ca94c4c9100e585d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/56fb1da47554266f943d515380c7d11392e8e2906dbb5b54ca94c4c9100e585d/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-14 06:07:04 UTC

File Type:

Text (Shell)

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=k35r3jdvkqtg7fb5kfjybr6rcojoryuqnw5vwvgkstcmseaolboq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/250114-gtqjyaypdw/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/56fb1da47554266f943d515380c7d11392e8e2906dbb5b54ca94c4c9100e585d