MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5
SHA3-384 hash:	78a4b2d99af83bef2948a1e46feac0cd6c3c1900f90801349acf9ce30413604cfdcd17a7319a7119c731683a7ad1dbd8
SHA1 hash:	517a8951ff5513999d8cc5e1c7d8925822855043
MD5 hash:	c66fb280aafa015fa6190cebc3662794
humanhash:	bulldog-low-timing-lake
File name:	scan.sh
Download:	download sample
File size:	500 bytes
First seen:	2024-11-05 20:03:06 UTC
Last seen:	2024-11-06 13:25:49 UTC
File type:	sh
MIME type:	text/x-shellscript
ssdeep	12:p79T+y7GavbQ/piOKMvzO00YAH+KN7RcLHWrexy0oo7Ch:pVOavbk/rvzt8Hxla2rhVh
TLSH	T1B8F09E916B35E0750E1B5334CB6617002BAD318029CCF2181AEE068AEAC1D0F61FDC33
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

79

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=672a7c8c8d23d9049133f034linux22vpnfull_triage

Tags:

malware

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/672a7a33c7967d5267a8aa91/reports/9827ead3-627b-4c05-830b-11ca1acd3618/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nagtqbn5dvg24s5a3gyhaknrct7l2kaz4pvpi37qgcmuwjnsexkq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

antivm defense_evasion discovery execution linux persistence privilege_escalation

Link:

https://tria.ge/reports/241105-ys8skaxjcz/

Behaviour

Software Deployment Tools

Enumerates kernel/hardware configuration

Reads runtime system information

Writes file to tmp directory

Checks CPU configuration

Deletes log files

Modifies systemd

File and Directory Permissions Modification

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/680d3805bd1d4dae4ba0d9b07029b114febd2819e3eaf46ff030994b25b225d5