MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5ddca587da191f27cf189f2231a0e8f90cbe1739f8a6236b5180c658ae8be512. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5ddca587da191f27cf189f2231a0e8f90cbe1739f8a6236b5180c658ae8be512
SHA3-384 hash: 9b120305b0fe8fea12401c7209c47f0f2873667d9db9df628c07869f5d42bfd8dda8fbb65a7d1d0d55973e492bf871da
SHA1 hash: e71b05d2a0b2b920b1c6dcf473c2e77b06a2737a
MD5 hash: ae13199239d91e27aacf644df78894ba
humanhash: hamper-vegan-mike-nitrogen
File name:23.94.110.24_1780734105107476_vendor_phpunit_phpunit_src_Util_PHP_eval-stdin.php.bin
Download: download sample
File size:28'658 bytes
First seen:2026-06-06 08:22:52 UTC
Last seen:Never
File type:php php
MIME type:text/x-php
ssdeep 768:eumWOXcTmHBBGUUO5/sCY4kSwULlhgQXtIAUONhKk4E:eu+ImH/GnO5/RY4kkLkONX
TLSH T1F8D2DF34C4C82FBDEEAA2A1D06FA6620D7D68B1E9498860737037D9B4F37C80443751E
Magika php
Reporter Blackdome

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
DE DE
Vendor Threat Intelligence
No detections
Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a23d91363a4889c1af9e84c
Tags:
n/a
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/5ddca587da191f27cf189f2231a0e8f90cbe1739f8a6236b5180c658ae8be512
Verdict:
Malicious
File Type:
text
First seen:
2026-06-06T05:54:00Z UTC
Last seen:
2026-06-06T06:03:00Z UTC
Hits:
~10
Link:
https://opentip.kaspersky.com/5ddca587da191f27cf189f2231a0e8f90cbe1739f8a6236b5180c658ae8be512/results?tab=lookup
Score:
93%
Verdict:
Malware
File Type:
SCRIPT
Link:
https://malprob.io/report/5ddca587da191f27cf189f2231a0e8f90cbe1739f8a6236b5180c658ae8be512
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5ddca587da191f27cf189f2231a0e8f90cbe1739f8a6236b5180c658ae8be512/
Threat name:
Text.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-06-06 08:24:31 UTC
File Type:
Text (PHP)
AV detection:
5 of 38 (13.16%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=lxoklb62depsptyyt4rddihi7egl4fzz7ctcg22rqddfrlul4uja._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5ddca587da191f27cf189f2231a0e8f90cbe1739f8a6236b5180c658ae8be512

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments