MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5ed092ce3c91c6c0f1a1f42a9346b6bf728ea08e347e94b2c0ae5d52c6711a15. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5ed092ce3c91c6c0f1a1f42a9346b6bf728ea08e347e94b2c0ae5d52c6711a15
SHA3-384 hash:	4c0a74356e01cb7740acdb71f3a035a3032c44e9dbefee91557d22c50f46d20326c3bf0484e30bf20b9813bd24f98c6b
SHA1 hash:	78117bfc2659fb63035344ce4cfe29c81357ff4e
MD5 hash:	5746c266c7261739b2006bcb04d86a82
humanhash:	lima-gee-sad-tango
File name:	dvr.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	414 bytes
First seen:	2025-04-17 11:59:45 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3WKDbnPZrQAvfQAMXBHQ3jQaTfQagXBHQ3v:GIb35WBVB+
TLSH	T1ABE09BDA35B1443729834DD5F0F68C14D5CADAF50AC9CE8E80CA0CB7644DC41F592F10
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

72

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan.Agent.GEYB.32338.17514.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6800f3052203b3e10cd03afclinux22vpnfull_triage

Tags:

agent hype sage

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6800ed5f90767142c3d8f38c/reports/5969d70d-7ed5-43f3-883f-8f97090650ab/overview

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/5ed092ce3c91c6c0f1a1f42a9346b6bf728ea08e347e94b2c0ae5d52c6711a15

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5ed092ce3c91c6c0f1a1f42a9346b6bf728ea08e347e94b2c0ae5d52c6711a15/

ReversingLabs TitaniumCloud Text.Trojan.Generic

Threat name:

Text.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-04-17 12:00:31 UTC

File Type:

Text (Shell)

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=l3ijftr4shdmb4nb6qvjgrvwx5zi5ieogr7jjmwavzovfrtrdikq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250417-n6g7natsgs/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.