MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681
SHA3-384 hash:	539f76c81681360a5befa72bb0251f0b568fbb20a6fb7f17b7172f45a9d378a4564e3f5f7bf376f0588e0c3444deeda0
SHA1 hash:	694f2fdc25e2cd021cd02bc7c86052309f85f33f
MD5 hash:	2a50234aa5ce2f24dbf4ad5d21c145ae
humanhash:	foxtrot-floor-lima-victor
File name:	ruck
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	902 bytes
First seen:	2025-12-21 15:14:44 UTC
Last seen:	2025-12-22 18:40:53 UTC
File type:	sh
MIME type:	text/plain
ssdeep	12:eOChKkvJhKkMOhKk36ahKkMOB5hKkmEhKk/2MhKkjDbhKkMOhKk3DR9i:e1RhRhR1RMY5RlRdRLRlRji
TLSH	T11811B66F0510BE41D51E5AB4B56B40106150CAD23EB50E5AAED5007F84C4721374DFF7
Magika	batch
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

38

Origin country :

DE

Vendor Threat Intelligence

ACCE Unknown

No detections

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

text

First seen:

2025-12-21T12:37:00Z UTC

Last seen:

2025-12-22T15:22:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681/results?tab=lookup

Kunai Sandbox

Status:

terminated

Link:

https://sandbox.kunai.rocks/analysis/5858cdb2-d7a4-4b82-bb2a-ee0c4240f8b7

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681/

ReversingLabs TitaniumCloud Linux.Trojan.Vigorf

Threat name:

Linux.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-21 15:38:18 UTC

File Type:

Text (Shell)

AV detection:

15 of 24 (62.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rw2jc4kwwlxzyb4abnvbgfsp4xlrtvpigzrwtns6cmkgi22mo2aq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251223-lmvbrsskdv/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8db4917156b2ef9c07800b6a13164fe5d719d5e8366369b65e1314646b4c7681