MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 83ffc3984e084bea54de26ee758e1a7ae1a41173d0e93be1054f4a68d859e688. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	83ffc3984e084bea54de26ee758e1a7ae1a41173d0e93be1054f4a68d859e688
SHA3-384 hash:	f5b719c9bcea175c3d580afb565ec9a10cae348bc0d3d8c013ea206e40460ed81f0111ea60a3c8fe4ef65934c6575201
SHA1 hash:	ad39946b95b677b8c16b22ddea22462632a0c2a6
MD5 hash:	45c2fc5185d0fdff35ceab9ab601350f
humanhash:	saturn-tango-shade-may
File name:	c.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	716 bytes
First seen:	2025-02-24 09:02:36 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	12:3J3CCiaNIl5wn0LKJ2OY66EMeNSwgtiOzKU:3J3nRNI7bKIGnvatnz
TLSH	T1EA01DA9C38A157B31E0A9E1BA0E788C99005ECC12264AF9DE51D5DB84CDD105BA5C2BE
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

28

Origin country :

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-33.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67bc35cf28ab76d43a5cd2falinux22vpnfull_triage

Tags:

trojan agent hype

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

lolbin remote

Link:

https://www.filescan.io/uploads/67bc35d46222db7f23d9c390/reports/d3908e4b-e089-4efb-bec7-22d18faebfd4/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/83ffc3984e084bea54de26ee758e1a7ae1a41173d0e93be1054f4a68d859e688

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/83ffc3984e084bea54de26ee758e1a7ae1a41173d0e93be1054f4a68d859e688/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-02-24 09:03:12 UTC

File Type:

Text (Makefile)

AV detection:

12 of 24 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=qp74hgcobbf6uvg6e3xhldq2plq2ielt2dutxyifj5fgrwcz42ea._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250224-kz3y1atmal/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/83ffc3984e084bea54de26ee758e1a7ae1a41173d0e93be1054f4a68d859e688