MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5f98a51ad7a3040bcfb2a2e4299585ed00814a13ff418edf368d304f837e3a12. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5f98a51ad7a3040bcfb2a2e4299585ed00814a13ff418edf368d304f837e3a12
SHA3-384 hash:	ac5f6671e78a33f9ee20ef9bc3e95a504211889353eee899f355210f30b8f2c0cda981e4e20947f05edb5d227b78ff45
SHA1 hash:	50076a1a789c5776b1fae605aa2b986dee415657
MD5 hash:	7815340dfb50b3a6901ea0206df70064
humanhash:	alaska-violet-earth-bakerloo
File name:	wget.sh
Download:	download sample
File size:	822 bytes
First seen:	2025-12-01 16:24:07 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:ihqYfNIl5B0LKp+OFOjMOTtjWSOZ0tygXVn:jYfNI7YKp+IOjXT5Wlatygln
TLSH	T1C00165DEB2B134720C85CE3461614E4C9434E2D936B34B2ADDF439FAC5DA600B237EA9
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

24

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Malware.32160.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

InQuest

Result

Gathering data

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-11-27T21:31:00Z UTC

Last seen:

2025-11-28T04:39:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/5f98a51ad7a3040bcfb2a2e4299585ed00814a13ff418edf368d304f837e3a12/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/dd723f5c-0c1a-4583-bbdf-7f50269d46de

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/5f98a51ad7a3040bcfb2a2e4299585ed00814a13ff418edf368d304f837e3a12

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5f98a51ad7a3040bcfb2a2e4299585ed00814a13ff418edf368d304f837e3a12/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-11-28 02:33:55 UTC

File Type:

Text (Shell)

AV detection:

18 of 36 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=l6mkkgwxumcaxt5sulsctfmf5uaicsqt75ay5xzwruye7a36hija._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251201-twhckabt7b/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.