MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf
SHA3-384 hash:	f3f922e6b62ea6ff9d7d5c16dac605f9b9a819a431d4417110c5a23f2508a2c54b62d2b477716b2c10742c66c076d90c
SHA1 hash:	34aa2bf2489193a59bd589519579ba93cc346f30
MD5 hash:	909d09399f888dfd9dff1468bb2241ab
humanhash:	six-carpet-lima-tennis
File name:	index.php
Download:	download sample
File size:	16'240 bytes
First seen:	2026-08-08 12:46:54 UTC
Last seen:	Never
File type:	php
MIME type:	text/x-php
ssdeep	384:MZeDboj170Pkkafz0x3GNAVVqpWEoGYlrF7mTgGj6q:Qp7fI3yAvEIBmTgy
TLSH	T1BB72D03A2CBA58D819CDDACD60A0C6CC5F23A0879A6FE5177D7D1D2AD8572078C0BE85
Magika	php
Reporter	bstnbuck
Tags:	backdoor php

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

51

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

{HEX}php.inject.generic.565.UNOFFICIAL

Alert

Create hunting rule

PUA.Html.Trojan.Crypt-355

Alert

Create hunting rule

PUA.Win.Trojan.Trojan-1084

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

backdoor base64 obfuscated

Link:

https://www.filescan.io/uploads/6a7725594d38786ce6778863/reports/815e7c22-ac89-4865-8b2c-b3439e81a097/overview

Hybrid Analysis PHP/Obfuscated.F potentially unwanted application

Verdict:

Suspicious

Labled as:

PHP/Obfuscated.F potentially unwanted application

Link:

https://www.hybrid-analysis.com/sample/7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

js

First seen:

2026-08-07T16:43:00Z UTC

Last seen:

2026-08-09T23:45:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf/results?tab=lookup

Nucleon Malprob Susipicious

Score:

36%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Heuristic

Threat name:

Document-HTML.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-07 21:36:43 UTC

File Type:

Text (PHP)

AV detection:

7 of 23 (30.43%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=pempfgmtha7fphxthpinrz3g7uwoar645a52yuppwx7bov4lntpq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf