MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7b1a8b3b6ed3b2b39a2501d0ccbfbcecca3b1ee3b61e16c0300ca0b56c48e88f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7b1a8b3b6ed3b2b39a2501d0ccbfbcecca3b1ee3b61e16c0300ca0b56c48e88f
SHA3-384 hash:	3fa785ce4452e8a4b0c9d440674150d0956695aa6ef54abfd82b4d3cebaff480312e31b97597a12928e589a290e6632c
SHA1 hash:	af235795f99199ca6e48e7eb5784670231940e38
MD5 hash:	6933acc31ba2f5051819ddacbe2d5168
humanhash:	july-fourteen-king-jig
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	934 bytes
First seen:	2025-02-16 10:41:44 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:OIEMeByIEMyPIEMONIIqIEMkKSJIEMoAIEMUl9zIEMo9wIEMG/IEM+T/IEM6CIEa:OIYByI8PIuqICxJISAIo9zIu9wIQ/IIp
TLSH	T11011188D0755D63D2CE4CD0C30EE4A08AB7AA3C670754BA9ED54086354A65687C7FF4F
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

81

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67b1c1c2a0fd713c335b2b1blinux22vpnfull_triage

Tags:

shellcode agent hype

FileScan.io

Gathering data

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/7b1a8b3b6ed3b2b39a2501d0ccbfbcecca3b1ee3b61e16c0300ca0b56c48e88f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7b1a8b3b6ed3b2b39a2501d0ccbfbcecca3b1ee3b61e16c0300ca0b56c48e88f/

ReversingLabs TitaniumCloud Win32.Trojan.Alevaul

Threat name:

Win32.Trojan.Alevaul

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-16 10:42:16 UTC

File Type:

Text (Shell)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=pmniwo3o2ozlhgrfahimzp545tfdwhxdwypbnqbqbsqlk3ci5chq._file

Hatching Triage Malicious

Result

Malware family:

n/a

Score:

  8/10

Tags:

discovery

Link:

https://tria.ge/reports/250216-mrrbcasqcq/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

System Network Configuration Discovery: Internet Connection Discovery

Downloads MZ/PE file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/7b1a8b3b6ed3b2b39a2501d0ccbfbcecca3b1ee3b61e16c0300ca0b56c48e88f