MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8b8401ddf9800a57e216471d1a40827bce81d36e18a9a1f30ab57e994c6d6fbe. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8b8401ddf9800a57e216471d1a40827bce81d36e18a9a1f30ab57e994c6d6fbe
SHA3-384 hash:	c617dfc6abb72f1590a476d836a53a781d44997b767089a80eebfd9c0000f50c823ef96b693a7eece231ebb16ee0b07d
SHA1 hash:	82f97b4dabf92f27b55735be77c37ab837d0869a
MD5 hash:	1ff91bc8656781216cb3f2a03cc9901d
humanhash:	winter-august-bakerloo-oscar
File name:	wget.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'064 bytes
First seen:	2025-03-26 09:02:39 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:qgjiNNI62MKcl5xN+gSQCMLSXpCScrIC7v:qgjib2MFxN+gSoLSXpCScrI0
TLSH	T19511D3FF63D0661388BECFE834A58501921481A7E86F2B39E9DCC8AAC4C9F547414B59
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

81

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Shell.Downloader.Gen-1.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67e3c2dbcb6d38a89f3e4bf1linux22vpnfull_triage

Tags:

downloader trojan agent

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

evasive

Link:

https://www.filescan.io/uploads/67e3c2d7631830704a878a77/reports/bd34c31b-e885-4f94-ad1e-10ada7fb0e19/overview

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Nucleon Malprob Benign

Score:

2%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/8b8401ddf9800a57e216471d1a40827bce81d36e18a9a1f30ab57e994c6d6fbe

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8b8401ddf9800a57e216471d1a40827bce81d36e18a9a1f30ab57e994c6d6fbe/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Vigorf

Threat name:

Document-HTML.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-03-26 06:18:53 UTC

File Type:

Text (Shell)

AV detection:

16 of 36 (44.44%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rocadxpzqaffpyqwi4oruqecpphidu3odcu2d4ykwv7jstdnn67a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250326-kz6d5azyez/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/8b8401ddf9800a57e216471d1a40827bce81d36e18a9a1f30ab57e994c6d6fbe