MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7404b7ba71c622937bf6f31be0747ccf51b6e3f06a5f0503bc88234b421c1ba6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7404b7ba71c622937bf6f31be0747ccf51b6e3f06a5f0503bc88234b421c1ba6
SHA3-384 hash:	6736d6b7867a71433f042d167e77f4940543ba220a4fcd974f811954d51c2025603b7c7a98d11d640a5b2644c276a022
SHA1 hash:	8d542b7296f56661e93c95e4eaf4cf95a93daa61
MD5 hash:	b4d9976270a3441de7bb1978843b2c66
humanhash:	lithium-fanta-sink-salami
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	2'123 bytes
First seen:	2025-02-01 18:21:21 UTC
Last seen:	Never
File type:	sh
MIME type:	text/x-shellscript
ssdeep	24:ixKBHefUbcerBH9ePfRkwBHmUkcjBH93v8RvPYBHa7zPSgqBHVIBHZj6FBH+31qq:9hMN5367x6OI7VIX6yuGTz9
TLSH	T1384166C161904FB2CDE885047597A07D102C89DFEF1E9FD8D8998EE4A2C4BE2B544DCE
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

102

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=679e663b416a81ccc3c4e9b8linux22vpnfull_triage

Tags:

phishing spam

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

busybox evasive expand lolbin remote

Link:

https://www.filescan.io/uploads/679e662b5dee189200750b32/reports/aa952b3c-56c0-4be9-a6c3-17e63ad2f655/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Malware

Score:

79%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/7404b7ba71c622937bf6f31be0747ccf51b6e3f06a5f0503bc88234b421c1ba6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7404b7ba71c622937bf6f31be0747ccf51b6e3f06a5f0503bc88234b421c1ba6/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-01 18:21:40 UTC

File Type:

Text (Shell)

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=oqclpotryyrjg67w6mn6a5d4z5i3ny7qnjpqka54raruwqq4dota._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

defense_evasion discovery linux

Link:

https://tria.ge/reports/250201-wznd4avjew/

Behaviour

System Network Configuration Discovery

Writes file to tmp directory

Changes its process name

File and Directory Permissions Modification

Renames itself

Unexpected DNS network traffic destination

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/7404b7ba71c622937bf6f31be0747ccf51b6e3f06a5f0503bc88234b421c1ba6