MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8bf079dcd5e37f38fd5e2b3226c1d412497bc4a00807355a3295ba5d3076f953. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8bf079dcd5e37f38fd5e2b3226c1d412497bc4a00807355a3295ba5d3076f953
SHA3-384 hash:	e895aade0e9847b8c1532e0f38ab222d22ad32822be0177e1593ea09018e77cfcc5278a5804e7534b8782c9f77431dfe
SHA1 hash:	979f7e29bf69ba75d12f5ab4ad4180ec2c6b2a69
MD5 hash:	e85460152a7f046a036c00ba0cc85d8e
humanhash:	pip-nine-early-paris
File name:	usw.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	324 bytes
First seen:	2025-12-05 18:22:24 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	6:LA5/nfiAK6iqLGmRDA5/pFGNIvF+6FakDA5/laLaNgoCKDA5/rHzaQ7:shfLK6nyxhSNIE6FakUhlaLaNgoCthfZ
TLSH	T1DBE0CDBD002BCF17C1129D00A03B30333033DBE660A0CE0AAEC5F836A19CA203332E05
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

28

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Linux.Downloader-35.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/693322ffbba50eaf0423691b/reports/34c83d99-197e-40de-b238-d88ebea3c6f9/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-05T20:50:00Z UTC

Last seen:

2025-12-07T12:32:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/8bf079dcd5e37f38fd5e2b3226c1d412497bc4a00807355a3295ba5d3076f953/results?tab=lookup

Kunai Sandbox

Status:

Failed

Link:

https://sandbox.kunai.rocks/analysis/f3468329-015a-4ade-98c2-3708e7003211

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/8bf079dcd5e37f38fd5e2b3226c1d412497bc4a00807355a3295ba5d3076f953

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8bf079dcd5e37f38fd5e2b3226c1d412497bc4a00807355a3295ba5d3076f953/

ReversingLabs TitaniumCloud Document-HTML.Downloader.Heuristic

Threat name:

Document-HTML.Downloader.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-05 18:25:54 UTC

File Type:

Text (Shell)

AV detection:

9 of 38 (23.68%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rpyhtxgv4n7tr7k6fmzcnqoucjexxrfabadtkwrssw5f2mdw7fjq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251205-w2zvxaxjdz/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8bf079dcd5e37f38fd5e2b3226c1d412497bc4a00807355a3295ba5d3076f953