MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 76013487f3735ac4a83381a9533aec048e2a17868398e410b6999ccdbaf1be74. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	76013487f3735ac4a83381a9533aec048e2a17868398e410b6999ccdbaf1be74
SHA3-384 hash:	7eae45436b780b971b2c71b571a3dd43623823833c90a160cc35e925afd93a87975898b04fef8166ace3848676b9f26b
SHA1 hash:	3fe07a079ae19f2f1ce251881da0a1a1d2fde25f
MD5 hash:	7e547ab6941c852824e7aa661883a837
humanhash:	ten-delta-ten-zulu
File name:	wget.sh
Download:	download sample
File size:	1'116 bytes
First seen:	2025-09-08 15:17:56 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:7dIdvJdIdmdIdxNISdIeKsdIdNdIdQdIdLTDk0dIdoDdIdTkdId7dId9/dIdZxv:1tWZp
TLSH	T1802158FE3339150597240A8430760510A2CBC3937BAC9B81F3AC10236D9DACDBE29F2B
Magika	asm
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

30

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

mirai

Link:

https://www.filescan.io/uploads/68bef3d8a1a41633174d600c/reports/f84bd690-fce9-4e21-b729-7b39176c1533/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

ps1

First seen:

2025-09-06T14:10:00Z UTC

Last seen:

2025-09-06T14:10:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/76013487f3735ac4a83381a9533aec048e2a17868398e410b6999ccdbaf1be74/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/defc4725-4c85-4a3c-8452-9d26bb159283

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/76013487f3735ac4a83381a9533aec048e2a17868398e410b6999ccdbaf1be74

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/76013487f3735ac4a83381a9533aec048e2a17868398e410b6999ccdbaf1be74/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-06 19:07:00 UTC

File Type:

Text (Shell)

AV detection:

17 of 38 (44.74%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=oyatjb7tonnmjkbtqguvgoxmashcuf4gqomoiefwtgom3oxrxz2a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250908-spw2psytd1/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/76013487f3735ac4a83381a9533aec048e2a17868398e410b6999ccdbaf1be74